06b81c8edd7f620513a06e3a5cc11483[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b81c8edd7f620513a06e3a5cc11483.bin
Size

833KB
MD5

e9cd0215fb96a3aea69f03cd2fb9a44a
SHA1

24aa2e21c116fce9afb52b3db5464d2fcec8bc58
SHA256

7bf7121380a2d453e0131e373d3a2024f8453b822af12ecf70881a6c78d93edf
SHA512

e7140a241e78a024a021521e1542d40a37969b12d8c42634f227c24a51eafb7da387cabb333b30c8f3132d487ae7ede30dfe5e2de402cd36b850887c6a75f806
SSDEEP

24576:+KEBR9+TGKkJMHXl5Uk86G8RXdKEzU1pPH:EBR9+mSnb8W53zEpPH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/65082d1a97a4636a529d3a52248ec1eed728fa78c1a3b3e34986e0378b393f1c.exe

Files

06b81c8edd7f620513a06e3a5cc11483.bin
.zip

Password: infected
65082d1a97a4636a529d3a52248ec1eed728fa78c1a3b3e34986e0378b393f1c.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 833KB - Virtual size: 833KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ