616b848d17252f7dae4de86383d25bee[.]bin | Triage

Sharing

General

Target

616b848d17252f7dae4de86383d25bee.bin
Size

183KB
MD5

61abe960d19d4c45bf54fd282c1fa620
SHA1

91b70fecc55f7b4ca56d1e30c3e995376c544003
SHA256

227e9d1546eb0b0e0ffe197760045d705ff5f5e1062792c7bc984afa7ea3bb19
SHA512

3e7891fe168f451ec0b50277ed6ec0b65859c9911b2dacd9683617850f4d5a6a66ad76dfba724281cb1de036c4192f81fcf4ebd4c5f61b62f856c472d2c6ae6e
SSDEEP

3072:7+uQLe+fyNy1ENzAfXeXuOYJolxAlnFqj/9CblAUpGydYANJrMUU6E4hKn2dtfm5:qle3NgEhA/eXuOYarA9FsGAOJdhgxRnj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bfad1fc041e176f9335d91cc4480e2c373d29354a33f5039212afe9e6d879978.exe

Files

616b848d17252f7dae4de86383d25bee.bin
.zip

Password: infected
bfad1fc041e176f9335d91cc4480e2c373d29354a33f5039212afe9e6d879978.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ