26ef4aefee21fdc4379e678f1fe3ceef[.]bin | Triage

Sharing

General

Target

26ef4aefee21fdc4379e678f1fe3ceef.bin
Size

1.7MB
MD5

c062dc62931a58ac38fbb7a11e4b324a
SHA1

094efc0ec6b529e6763585bd927b3de85cc75bfe
SHA256

b5d3f8144267d307184ff4ca2353ea1040b329ce11cc9c9bc97ceb951f73fb9e
SHA512

54e2195f41610ab0e7772f58b86bd417636994d0471bb6ac04f3be7dfaff87d2cd4cfe96088f8ba411d8e7396622544fe9f2d658847cbf0c3561becf7021d338
SSDEEP

49152:MPd6PYN4oejsTto25sNCPZT01s9087NURTB5fJZ3:G6wN4uYNChTSEZ7NUn5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c1b13b5d0cfc0ecb0d05f8d95ccb316804135fc89d2ee7f9b87fa3f1dc86f155.exe

Files

26ef4aefee21fdc4379e678f1fe3ceef.bin
.zip

Password: infected
c1b13b5d0cfc0ecb0d05f8d95ccb316804135fc89d2ee7f9b87fa3f1dc86f155.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ