f7b78fa690e0e9a4531fc59aedf086a8[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7b78fa690e0e9a4531fc59aedf086a8.bin
Size

670KB
MD5

d848e8974f7d19fd1ff41c7a650211f3
SHA1

fa72ce681955c5ce59d8c33e758b0ca8de1bc3a8
SHA256

72b1cfbb4c2e5b7b0813c6f8356a8f7f04c2c9a20deea52709fa52d91d254458
SHA512

2ed47a975e159fa7bb66e5120bd4b7f1d412cc9b712dd0372bb306fc5e8c3e34d092fd71538ed908c9ea76f83d5a3f14c0e9ba04c1a9975ad33522344fa6e867
SSDEEP

12288:FabdnBVM2F3Qo5/pWHQH6BVTe5NpOf3haA8/pdFWCFhJ69cd6H8Jwf1reQNxNLYt:FapBV1l5/0HM6LcW3EBfl/acVJwf1rfs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4808c1aac690f7768bd9750760038096f5e5134e38f5e2100d060ddc41c15a0c.exe

Files

f7b78fa690e0e9a4531fc59aedf086a8.bin
.zip

Password: infected
4808c1aac690f7768bd9750760038096f5e5134e38f5e2100d060ddc41c15a0c.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ