5f5b4b7694a47e5daf2ea45203e7f410[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f5b4b7694a47e5daf2ea45203e7f410.bin
Size

698KB
MD5

67cacb85fbfe854f856ddc57baf0d35c
SHA1

4fbb388423e721722be3dfa6c1b46024daabde6f
SHA256

cebfc937b413c0ae717d7354bf954f1d24622f85f515268f8b8b0788647830d2
SHA512

d61c5566640ccd2d42e6c7ba1984ecfb0adf3fc847afd9af45b49c992dabf6febc68aca6be8c85f62154252132f0d4d4871277d1d2fc066cdacf717763740fa4
SSDEEP

12288:iPYiMTYwTLedR+KqJD7qkfwHYFccLtbNbGpE6nuV3Z+gNHHJCpG:1ioYwud8dt7pfsYqcJNbWEZ3ZKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fdf6769af86db361b56a4bc21862caa4c4f3c68f6b2fc1503735219db3727125.exe

Files

5f5b4b7694a47e5daf2ea45203e7f410.bin
.zip

Password: infected
fdf6769af86db361b56a4bc21862caa4c4f3c68f6b2fc1503735219db3727125.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 811KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ