xxx[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xxx.bin
Size

416KB
MD5

076a6c16fb07412ed58ba25ffb687119
SHA1

3ce823b958c6f9fa506b13251a2761548d064395
SHA256

a559927413db6b0412e7560b0df0f2bf91190b7e4f6d0534e5b82e19a9a40f18
SHA512

c779167c1358b563e69959e1e5ffb8286a7d28da8d3685962048bdd08855bd963f00fdc6f44d40c096a520cc8f3a984d7ce4f6b79593c66ed880e644888db3bb
SSDEEP

6144:t6ms4TIWSj/y1zKxYNg/J85mROvE9IzsxHnslEftOWyN0OVh6Ia:rs4+jqV0ROaIzwHslWOWyN0Cr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xxx.bin

Files

xxx.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.</Z
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.3)b
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ