b6a667d8ba9928e083e1dc3be2e3db9e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6a667d8ba9928e083e1dc3be2e3db9e.bin
Size

251KB
MD5

1ed269ef59238a3b6daabd62bd9d53b5
SHA1

bee365a3a8e85fb18cea337fbf2731518e598130
SHA256

a5d608acdcb233c9aa868ab13a7e84ba08c13b8d0b76b3a0401072d2c0e0231e
SHA512

f211060ea69f1530c8c53829c2c55509cb6895a254182587583534f60d22c0ab7ddccffd8a672f81b07ee255e9e8b277d29ebc7bb4fc3cce0adcf8de16bee0f6
SSDEEP

6144:e3BNxlcCNoAQ+TF11rkFCzzjs0DkSdX8gb0IeN97UXYjBM+kL4TEAG:e3BblNXnxIC3jVDYIeNYYjRkEIAG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/efe14406b96e4df6c59b5b8a4eb6a179c6f5cf7d08df1d2492a6f71f08d1e17c.exe

Files

b6a667d8ba9928e083e1dc3be2e3db9e.bin
.zip

Password: infected
efe14406b96e4df6c59b5b8a4eb6a179c6f5cf7d08df1d2492a6f71f08d1e17c.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ