fa362d6eab964c2243f02ee774ed6d90[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa362d6eab964c2243f02ee774ed6d90.bin
Size

655KB
MD5

f4aee889d7c2c03665b7a33968a47585
SHA1

6c309176ab871221eb662120592135c89829ffdc
SHA256

562833af0fa8a3aae95389efc5285e642e49d1475e1512d800a67d4eb6a8ab66
SHA512

77ef11ae5a8de4807169f4b11e20eced32b28bf725a4ea550dd36e22c6851649db25eafdcbf9583014c10db02bf99f4abd7d0fd6c0dde8f677672a692f20c9af
SSDEEP

12288:ONDZbYkk6cRglCv5hc4RCh6nVB9XrO4hzOUzTtAgC6:uDzk61CvI4RChuVLfzOUzTtbH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d7d85feb390da925a7f895859050d29e429c812f05f6b5d11546b0b372524fda.exe

Files

fa362d6eab964c2243f02ee774ed6d90.bin
.zip

Password: infected
d7d85feb390da925a7f895859050d29e429c812f05f6b5d11546b0b372524fda.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ