b99a037ed5bae20575f9e2eee59feda3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b99a037ed5bae20575f9e2eee59feda3.bin
Size

275KB
MD5

7e7a24d83eb27cd7364a9abcd9fc3813
SHA1

e44949537e3ae9fb5ec36c275ade42c01aaf096f
SHA256

b2ee2b021795b08658f5fd0dfe41ca5f893397a33738244ed9412979fd870696
SHA512

a10525b6344af3f5ddb25c3988e8898fed2e6fca3e6a29896abad632f162596c63376e58b76ad40ef6522664c3c1c8b18371bfd10e9d354402a882c619d51720
SSDEEP

6144:Aj1SaEOAWCzuTBIgDPU7ULLLZoTkRH7w/aMYJM2yl3y7LnbEO48XVMMc:Aj1lEcC66J7yL9NV7FMYWBqLnL9Vnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/02dab59a84384a664a66c61822e54995867a737b7166b1efea7db1c5ab6d9520.exe

Files

b99a037ed5bae20575f9e2eee59feda3.bin
.zip

Password: infected
02dab59a84384a664a66c61822e54995867a737b7166b1efea7db1c5ab6d9520.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\z9jsu3\obj\Release\Extractor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ