ba6e7e1e9161199cda53984e8797add7[.]bin | Triage

Sharing

General

Target

ba6e7e1e9161199cda53984e8797add7.bin
Size

292KB
MD5

1374f241cbb67e8b43c8ce95de2e140d
SHA1

5e62d5edbae9d159025ebd6293b6e6022351b010
SHA256

e4d2abb64b06e33dbb6cb728370829dc332b4ea0affe03100b2670d386ad7038
SHA512

17cee2841001788ea584ca0d21072ffc5fff02e20670346202cc81d5fca0c868d5b036705eb601967163b8d8eeacd61294c230171ca59b4cd08e818db2c3b3ad
SSDEEP

6144:F21/IjU2Fe515tLeyGsztq56gEijLkKRhP+KMKFad2+nGij92Z6vNyj:01mvY51/aFsY8fiPRf63n1/vw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/32429b9055e49788020d2baccfd472075a26cbdd1c70d0693150cdf963975775.exe

Files

ba6e7e1e9161199cda53984e8797add7.bin
.zip

Password: infected
32429b9055e49788020d2baccfd472075a26cbdd1c70d0693150cdf963975775.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ