b59e497bc48faee481fe3a7fe2fcd9be[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59e497bc48faee481fe3a7fe2fcd9be.bin
Size

193KB
MD5

9c3420114ef75eb9cd697921c6c585a8
SHA1

4fa45848799b6a8c9466dfdbcd50750cbd657b5f
SHA256

063dac27acd869a939b7941ed648e6c69efa0a24f1b5eee2252769cd0adb7308
SHA512

61009d6955999dae3486642928f595e3ec37671ee113fe3f9b14daad6db3a4dc0fe7dd7c74d05391253efe63afa4994acb03cdb1337b49f164a4903f7ad3a935
SSDEEP

6144:Zpa2sveXciQhAPO2JAKyWf1nVvRHYXFBn2:6szjLAKyi1VvRv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8c2a4618805be59f901786631cb761c1be63389efc6eb1fab198a5dc6c8edb4a.exe

Files

b59e497bc48faee481fe3a7fe2fcd9be.bin
.zip

Password: infected
8c2a4618805be59f901786631cb761c1be63389efc6eb1fab198a5dc6c8edb4a.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\GitHub\creamsoda\TequilaPC\obj\x86\Release\CreamSoda.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ