b20da8c093a4ae023048aaa9e3c9571f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b20da8c093a4ae023048aaa9e3c9571f.bin
Size

209KB
MD5

9c774fb7d1065aec6f018377f284848a
SHA1

00de4da889ff29dceb45891749fd9ea0d05cb5a1
SHA256

30ac72bd1c42c7018882cb8eb4d91046473b98dfc6bee99592e2b8a667215916
SHA512

0bf36282ff9e5576a5d36c4da77267b4fd95029d3097021e0d27c6a29dec57ed8db92c57c69160751dba422daf08fadb5d5a46927671318d1a2c8168c83eea2a
SSDEEP

3072:lLYHiqZNIYDyoA/wMXCAFVSyY6debXHxhDcijz/39onjXLABTtDx7slXsbH/jGcK:lUZnIjb/jTFxZeTxhDnzf9on8b7EQHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff.exe

Files

b20da8c093a4ae023048aaa9e3c9571f.bin
.zip

Password: infected
70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

#MpvJ-U
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ