6f66a80f63f04a40812c6e410a26694b[.]bin | Triage

Sharing

General

Target

6f66a80f63f04a40812c6e410a26694b.bin
Size

3.9MB
MD5

f53f0b4b947724a643f4989d5ef284b7
SHA1

cd379446b92e7e600c01941f71d4af869577a251
SHA256

b0a1c5ad2fd41c255c097136b9abb04e45102ff0077f5dc850f912880aef2aea
SHA512

877a54ece6ba96fe1eb2f1207c32009d4412b1615a6b9d7f44a55d800b55e83528698fc44077c74b7aa858a784fca04e57777533a0cc728aa7a67a45bf40f68c
SSDEEP

98304:rvngqAdr6A0YepaYiE8U/3vVPgjy5hxlGst8VRpc:rfPzpaYirY3dPgW5hxlG9Rm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3498a720830519dabf81f3f99afe873c06407efffe118f59ec88cba096c559cb.exe

Files

6f66a80f63f04a40812c6e410a26694b.bin
.zip

Password: infected
3498a720830519dabf81f3f99afe873c06407efffe118f59ec88cba096c559cb.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LNCayYN6E99YhpFJFUYu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ