6eaf179e8241e0b5f0af8d29cc1324db[.]bin | Triage

Sharing

General

Target

6eaf179e8241e0b5f0af8d29cc1324db.bin
Size

903KB
MD5

49823444a3f9e5c6fa1b641c22c49e80
SHA1

4773ba2db56ec67e8b53ea2f0f1692940734d9fc
SHA256

651e6b1c8c74e7b9b7b29c5f80954cc7d920fba3b707a6f585034a8bf2cff1db
SHA512

55f8221fc18177f0f4e99dad2d3efca260ffc2b237deac3c9d6d1cac22a2fd8e745c54e0928604e44f6b3ec5ddd800187a5e127346339b324a189d21e018ae7e
SSDEEP

24576:SbzMsS+9VK1TPMmdrqqRUmxoGwIwX9bC7xMIDXJ/Eeq:ohS8KNNrqIwI00xnDX61

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/19e7c429daeb1672b36d0705f3c9e73b5dbc935c14d8b33218ae6f259a72da24.exe

Files

6eaf179e8241e0b5f0af8d29cc1324db.bin
.zip

Password: infected
19e7c429daeb1672b36d0705f3c9e73b5dbc935c14d8b33218ae6f259a72da24.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 964KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�@S��u�
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE