db714795d3127df3de0e85f1b21db2c0[.]bin | Triage

Sharing

General

Target

db714795d3127df3de0e85f1b21db2c0.bin
Size

2.2MB
MD5

2d47e00f2cb779682f80b29e61ed651f
SHA1

adc0f121be3f00f93415fdfa43ee790495bdd48a
SHA256

ff30357418281a2c8bda32132dae0ddf7ce54027acc75c8317efff9a37877845
SHA512

a2100fb1ee1932008ede5fc85120e9596c33a6aaaffcff613586733f2d3bd3e1f3921e6b9bd2bc8c99631175f48261d30dc1f2cc79cf85746fe0f21c6b065ab3
SSDEEP

49152:myEXEOiM7LC5KnIqV52XGvZaJ0wn4dDWfYd87JHm0iAVEz2hV:jGE5M7hnIqV52WvcJ0i/Y8xdisEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65.exe

Files

db714795d3127df3de0e85f1b21db2c0.bin
.zip

Password: infected
87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ