0f4b5fb26bf123aa8fd8e90add5770fc[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f4b5fb26bf123aa8fd8e90add5770fc.bin
Size

920KB
MD5

866b5d8925b7e782ae38cbc4a3a3433a
SHA1

e5214cc431bab1621bc4cbae38d90275aa93a66e
SHA256

7364a67781703b7054b3b9f25cd2da541f167fdb9f7408a48f952c4bd7bd643f
SHA512

fcaad4e688e59d443cf0d449fd202205d77f3c594595846074cf040b105bee92b75a2e294c048e2915d09f66b0135286bdbe860f2503602f72343053c089e5da
SSDEEP

12288:hTrnfZcLuaMQeJ1X+VvDeElEMc9xQhaTWZuhu+7XUwfCO0eEtU2awuxtP/naN5br:hffWAvn+VVzhGWiu+TfCTyxFiRDZL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c3a045823e045eb117eceefa8d34697c835fc969831e0f1d1401bea5edb8e596.exe

Files

0f4b5fb26bf123aa8fd8e90add5770fc.bin
.zip

Password: infected
c3a045823e045eb117eceefa8d34697c835fc969831e0f1d1401bea5edb8e596.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fuHy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 935KB - Virtual size: 934KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ