fe4ebc62a5498c4d43699abe554febb0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe4ebc62a5498c4d43699abe554febb0.bin
Size

725KB
MD5

758d6787ef1b6c2ce844eb1fb2c10669
SHA1

4dad9b382b5dcdb5078ae5a4f5fbd82b6e3c85de
SHA256

99596cea2129b35008756b8f02b51f293596e5abc7367ef98ff67cbaed11aac9
SHA512

fdb88c60f0bb25380d8756adc59edfa5320e0d1b2e6d4c0f250c64f7b8c4af579d970cfb9491ddaa0f6afdabf7794553ad5e9c21e9ec41bb41a482711124471e
SSDEEP

12288:CGp+VbRzCgWNk5ti+jfDfthCy0r5rYsmIRQqTj4ouJ2nAmI6/k3Q9fTrT5tYxkA:CBVbULeoSbthji/mfcjn8cbRtWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c4dd9ec83dc0b304101fa6b2f37d93aae8921bab88ca6e49a6a8eb18d390ed79.exe

Files

fe4ebc62a5498c4d43699abe554febb0.bin
.zip

Password: infected
c4dd9ec83dc0b304101fa6b2f37d93aae8921bab88ca6e49a6a8eb18d390ed79.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1018KB - Virtual size: 1017KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ