8e55bf75f4c476a962dce1015f5ffcb6[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e55bf75f4c476a962dce1015f5ffcb6.bin
Size

678KB
MD5

2b691af2eed46b2d65863bca4a833420
SHA1

c6290907747aac65e7445c30b4f8e57d554f4bf5
SHA256

6394a476d1c1bb07b4b04a261e5e7e098617dbe71593030c258e55e4afe14062
SHA512

ce56d15ed027a1e14420a84ae98ebdd96b0a34f5d6c80729ec0d453803d392b9a5cf55d4dedc366954c290d8df3ea0a0db8658622dec6cd44ddb42e8519c17fd
SSDEEP

12288:cUQcnyd8r38ZMWcU6XQ2bD4iYTynv91vvkAk/JdNXNBowPc9T2G+KbCsAeZbMrct:cUQcnyd8IZMWcUKDrCM1Rkx/FX/3OTbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5c1009bc821a697905465a8c104b90813332d5815a85b73cea23131b930db557.exe

Files

8e55bf75f4c476a962dce1015f5ffcb6.bin
.zip

Password: infected
5c1009bc821a697905465a8c104b90813332d5815a85b73cea23131b930db557.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iIQg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ