b8298ee526bb093e3c96686d26d1361f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8298ee526bb093e3c96686d26d1361f.bin
Size

1.2MB
MD5

70a963ad8741a908019627e464119357
SHA1

b7e8d0aff4093be449e3049d6747af5610409e86
SHA256

db9b68604958afd0cfa21255a2fac3244d6df46661b68b94fae6db8256d24189
SHA512

7578bd22696bf48af2b5463cc637a515d102264bcd25861f769a382a063e430f42d97df75c42824031542a4304bab0858823f36f24b5de055e0d6cd431041d7e
SSDEEP

24576:u556XDo5OAiueMjF+yB1mWu+9+XeM5NjsTjlyWTLkH1B9Tu:qUtceMjsyCJ+fPk79S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/08d8919249b3f442106283b5a413eaff6b6b3d9ca76ec7c3a88101b54bab0fe4.exe

Files

b8298ee526bb093e3c96686d26d1361f.bin
.zip

Password: infected
08d8919249b3f442106283b5a413eaff6b6b3d9ca76ec7c3a88101b54bab0fe4.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ