a94578e1a694ba09dc9ed5dc7df60fcc[.]bin | Triage

Sharing

General

Target

a94578e1a694ba09dc9ed5dc7df60fcc.bin
Size

768KB
MD5

53551c63db131a5b5413b4b730bef5f3
SHA1

bab5b51d0503b9f4218125c129cd46fd9e5257bf
SHA256

642fdb884196e5db76b67b675c6ca207afeff5241a2aac13823e6e0608e4df9d
SHA512

b2fe22c1f8676268757fbd64e52f763b0ffe07fcc468c0cf3358033e9cf47c4f868e35fcd7947a8e1adb8754fae3bf2d18b3358463dd440b282169f12f23e988
SSDEEP

24576:FLc5n/Ir4YpoINs2eHz3IqHSDI5XXggBnc1uTxE:kqV/Ns/nH2I5VB+uTq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/b06ef71a820a829fc010a3bc33b6c630282b94d831e25f972b7173f0783b76c9.exe

Files

a94578e1a694ba09dc9ed5dc7df60fcc.bin
.zip

Password: infected
b06ef71a820a829fc010a3bc33b6c630282b94d831e25f972b7173f0783b76c9.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vVfS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ