221bf8e90cf25e7e31a866ab1bc928bb[.]bin | Triage

Sharing

General

Target

221bf8e90cf25e7e31a866ab1bc928bb.bin
Size

2.2MB
MD5

f48043c6d9040b9e77c748868772754e
SHA1

486d9f8d824ecd46d99e7a9aa059c040e0ffd760
SHA256

1a93f06d53f4a1904626ba0ee6458c76e56a7e0ba68cb10f38da2b32833ea345
SHA512

e9052d7d78b0fa30b2a998bb837a53bab722eb1219fb73acf7a666e9aa12832dcdbbb129c52db0afe6225eec4c25c7a6ef07282e7131199a553ff32a85786efc
SSDEEP

49152:7E6QG682osW6e0h57rQSEbwgONd5y20KSO8myW1f/NRTer8dja:Tk82Nze0BEM3Nr10KnhZ1fDSr8dja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4df5664d100141701b1dc83bd04dbf55233f5a5e8ae9a243f892da225d310e43.exe

Files

221bf8e90cf25e7e31a866ab1bc928bb.bin
.zip

Password: infected
4df5664d100141701b1dc83bd04dbf55233f5a5e8ae9a243f892da225d310e43.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ