6eab90173adf5c07e17b59fd377f4158[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eab90173adf5c07e17b59fd377f4158.bin
Size

213KB
MD5

c248ffd8234d4f869cf02c5fd95e95f7
SHA1

e5df231654ba1c7fbe539f8e5906e92d544bb6cd
SHA256

da970fa3f9a799a117c1c73647d2ac99c7778718734f19b8f668af97281af4b4
SHA512

b8022839e0093c06301cccbdde630afc1124d1aeba725bb3826d3218d7b4bfe9350392a399be8bc64dd28234bbc83104bc46608b744bed87ac4ea1774122958c
SSDEEP

3072:8MzfuYQ7aA9InZALs3xY3cRUL85Wce1M6pI3ZqFd7n7UQ7VkMBqUI25ScpPejm52:8MK7a1q4O3cW/y7sPjJkMcZ2NMjpHR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/825196f7ae2364e7712c9893e97c50fa639a3ecb747e7b431d6fa47110724eca.exe

Files

6eab90173adf5c07e17b59fd377f4158.bin
.zip

Password: infected
825196f7ae2364e7712c9893e97c50fa639a3ecb747e7b431d6fa47110724eca.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ