b9b6988c0a0bbc68f566bec556fce46e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9b6988c0a0bbc68f566bec556fce46e.bin
Size

432KB
MD5

0a3ece138302e9f4f2d13c1b5a0a9769
SHA1

07f35cbce5c1040be428a1eeb375b8c5075ff4c7
SHA256

df89cc81bc6a8614ee749e8b198aa45eaaa7dcfe563ea3ac5a87df33307338f5
SHA512

93c956ffefe5b278a865f5b09817cc0b1ece5f174daf7183652d91a72bdc52dd3973e41fc92c099b20b35dd95b492c728dc900d9f1f340488cba2bbfb16a3674
SSDEEP

12288:vlp04skAgolN+XWzOaqvSXTo3f5g4RCPcOO1lwTlp/0q:vP04sEob+XUOL6XN4ANUwTX8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3dc965026730b9f96f441014d8d0774766957f2bec593de505f1f123c25539a8.exe

Files

b9b6988c0a0bbc68f566bec556fce46e.bin
.zip

Password: infected
3dc965026730b9f96f441014d8d0774766957f2bec593de505f1f123c25539a8.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 642KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ