1bff7b7c5fb02011f9916e1a352437d4[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bff7b7c5fb02011f9916e1a352437d4.bin
Size

668KB
MD5

eb7f5b59888c9feb20dbed64b652ad96
SHA1

6807d51a8ce5e59058decba8ec9bf3955f8329c3
SHA256

06bebfd310a06bb76c883e25efe331071160bb9b11bcb931bb80655e8134e694
SHA512

4e80014407ae179b38d1b2d1382dd1e5b9dc4a82a5fae616bc292ce9b62ddfe89ea54ca29903c0444e21eb1c0f82167f64a4d81013e226211ada9cb8c5918d85
SSDEEP

12288:eZ2Vq35AolMaW0eV5r/3EPTjt3onD4FWoBCIxtmt+8IiDrqLU:W2c+olMaJeVp0PToDvUvxtTSAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3ef009e7f463f7547633cf58782dc38fe61e38e9e4fcbedf2f70311c6fa0e5a7.exe

Files

1bff7b7c5fb02011f9916e1a352437d4.bin
.zip

Password: infected
3ef009e7f463f7547633cf58782dc38fe61e38e9e4fcbedf2f70311c6fa0e5a7.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ