b2f3173adb50e33e57b1d47ab9e6dc29[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2f3173adb50e33e57b1d47ab9e6dc29.bin
Size

604KB
MD5

67441808614ebad5ca63884f382d615b
SHA1

0fd6d72423890c8a175a79a2c5bb7597a7162e80
SHA256

468fb4de2fe435dc4a0c0435e15269062ea353d1819c09c424b559909154902a
SHA512

acf709a9723cd2e9a54aa5d18780faf4f3c52de193180da4e18bf7ee300073d277d4118f48ae42d7707d0f3198972e8f63b65d98d858e67b3c070600bb96e731
SSDEEP

12288:fY5dOYrmqZsH025PnbkI3kbfJkS2LCEygrT+OlpXIG6+golRyoXVzONnUrgMFILz:f8dOrqZsUWzP/rTYGYARTBONU0mG5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7e7f02e7ac8a525256a238e4f7306e070b36199c265d8588b9a5d2193c1ae7df.exe

Files

b2f3173adb50e33e57b1d47ab9e6dc29.bin
.zip

Password: infected
7e7f02e7ac8a525256a238e4f7306e070b36199c265d8588b9a5d2193c1ae7df.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

aYBB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 619KB - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ