259f46fd4f0450441042a602283c64d6[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

259f46fd4f0450441042a602283c64d6.bin
Size

636KB
MD5

4025bb7d0f91182008fef1cde3c52e1e
SHA1

89222818bd3e57d2730074f7ac31458a98146c41
SHA256

80c000540fa266332cd873c20366d983e82a913f2b72ba2bb3d0ead690e0fa16
SHA512

6e45b7dfaee547489cd0758d450b7027afe74c193dc5a03c2345ec3f31d5a084b40151fc8cb6e14a76c19751e52dacc6cb1b866070f8853f27636778c9bd2cc3
SSDEEP

12288:duvGui+m97sIFnSuJHiQul1ugVPRHQ1us49cCVI1SScXROLrjbkodDZ:QGui17pEuMrpRG0CAXRYrnHdN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/870b351d47a9afbc5b250a50a24cdd348ed65d95eecee4cedff4e3191ac927a6.exe

Files

259f46fd4f0450441042a602283c64d6.bin
.zip

Password: infected
870b351d47a9afbc5b250a50a24cdd348ed65d95eecee4cedff4e3191ac927a6.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ