de59226317c951b5ce1e48ecab0d0202[.]bin | Triage

Sharing

General

Target

de59226317c951b5ce1e48ecab0d0202.bin
Size

634KB
MD5

1a73e76b57e8fa92a88fd2dc90e25706
SHA1

39767909289fcc00b361a56ae093e8f2f6c0dec4
SHA256

50635acb018e6d3a7503782e25e9c47836e8b127e7d650f5617f3b274588481b
SHA512

6c7f1662fc27a56ac9ee495117642cda7aec5c55f5634977050317d64218d458bc477aab6abb24b0b7983b69832f368a7669a39b48f6e3d56ad706f27c81d60e
SSDEEP

12288:ZaZ6YCpwg5LXPxOSPs1dySA3m+wbunQa8L0QMq0ElvDTH6DWOU8kWIHjLXcYFcPN:QZ6YCpF5DxOSPs1sf3BAunQBeElv5Obj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/da1d05f12377341158f6fd48230fcb869a2810d36a9a02aa0dd1cdb804982b92.exe

Files

de59226317c951b5ce1e48ecab0d0202.bin
.zip

Password: infected
da1d05f12377341158f6fd48230fcb869a2810d36a9a02aa0dd1cdb804982b92.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ