16e70fcf3f5dd42787eeb19de11a149f[.]bin | Triage

Sharing

General

Target

16e70fcf3f5dd42787eeb19de11a149f.bin
Size

627KB
MD5

8444cfbddbdf46c107a5ed41248773c7
SHA1

f284db42eee2a2043988314c8ce06e32398b15d5
SHA256

b527973dfc550b68a3c9019a98d33bb40949a824af5d3d480c10b2ee8e20cd8b
SHA512

52674bcf97bc7cf63a582fc3b3805c4f65907971e81f2163364093ab4ae438c12a940acd0b5c58787ff996180e8ff8ab92b39607904962da3295a9b5cab2d0b5
SSDEEP

12288:M8MmniSJ323asDY8MITaMdkNdWBww3/eaAiWngePbX:/MzSJ36wzvQp3/2ngMbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8ae053d9300b897c0009559407842f893ca81461f707172cc42a324436839a56.exe

Files

16e70fcf3f5dd42787eeb19de11a149f.bin
.zip

Password: infected
8ae053d9300b897c0009559407842f893ca81461f707172cc42a324436839a56.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ