fba71dec5c2e73e5b45247f3201d95cd[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba71dec5c2e73e5b45247f3201d95cd.bin
Size

372KB
MD5

5fd833118c0fd4a5d8d52881c0c70c86
SHA1

b537465a9b368e79ba6ec724174b24435c18f6fc
SHA256

92b14103c2a1db5b2a1f6dccbf44962613669f61748bd5a07f5f8e3c23e1b615
SHA512

475a50b16f8e9d87ca38fd84c02dd6a8b267fabb18057d99ee12e35559cf99e6e8062e7d6da007b6ed957306b23b7dcab9787d11ebeffa564f391597a45b260c
SSDEEP

6144:gX+qzOBfXKQUmkzmgqceTzpIrcZpnKGmGUPg6Sb6cXVbGL5xBI1CghhKLOIbJYym:y5OpXjUmcmg0GrcZpKtUGOVQbBI1CWhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ab5501455d6b22f8e26dd31ed265879ca6c0d3c6677793738f49360628792991.exe

Files

fba71dec5c2e73e5b45247f3201d95cd.bin
.zip

Password: infected
ab5501455d6b22f8e26dd31ed265879ca6c0d3c6677793738f49360628792991.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dCEY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ