b8fe14464c4016717c1e0e7c52cbfa06[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8fe14464c4016717c1e0e7c52cbfa06.bin
Size

645KB
MD5

307d8be73965965b1539d5e1c38b1d3b
SHA1

a156a1293ec5c7d95240177af3d9c4691dd36c04
SHA256

d2c0179b68cbdeb824ea084eebd01724d9f87ba42bccec4d4a06fa063b710318
SHA512

b490275359b5d2f79bcfe5edb152da65c2b636431573109380815e3d9d7615841cbd3d8e035b896c365199b25bb95768a962245035315bb93d098f89d3500749
SSDEEP

12288:yYktJDNetFv0tk4WYWBOyXivYX/RkRoAiML2AjS61DeJTV1WJ2Z6LCG4HoB:v+KtF89WYmOyXiQqRF1xhm/WEZ6LCLHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a4cc43c1a6f7f1a92a70e1a9b0ee4157682ca2e22a9c038400c90f4e0053d298.exe

Files

b8fe14464c4016717c1e0e7c52cbfa06.bin
.zip

Password: infected
a4cc43c1a6f7f1a92a70e1a9b0ee4157682ca2e22a9c038400c90f4e0053d298.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ