f9bb6ef02f29f52ff126279ff7d044bb[.]bin | Triage

Sharing

General

Target

f9bb6ef02f29f52ff126279ff7d044bb.bin
Size

148KB
MD5

32266bf5e16888b49ada682dfe0aaf9e
SHA1

e517b7f3758e0ec68b571c4e24da57ac1c56ac07
SHA256

7417c092b97809415e22e0956a66956b508dad8c42c49c627c4f4e777f8dbc50
SHA512

05840fc1db2823153f104bc129ac43da52af1d1200406f242ec7e729d434fc8a87cfc9de23db447e195e112ff042c02d5de4368963694e9424eaaeb0a5f003ea
SSDEEP

3072:UgT1TzyBKiEOmNUog1LvTZzHklN6hqrBfrsIymlQRvuQXktVF8W3VuboWTNkalyt:xTQB9zmm1+lN6hYblUuaEH3Ej5kag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2f175dac5c8571e586722f6927b0112af22637a17efb3acfd78e813a804a38f8.exe

Files

f9bb6ef02f29f52ff126279ff7d044bb.bin
.zip

Password: infected
2f175dac5c8571e586722f6927b0112af22637a17efb3acfd78e813a804a38f8.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ