57b81f3bfbd7e82065190ea6a2f59849[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57b81f3bfbd7e82065190ea6a2f59849.bin
Size

1.1MB
MD5

57feeab5dd99b695874f72410e3fd3f5
SHA1

acb74312dc7880873e6828fb74e02c1797021dd6
SHA256

3da88076ffc753bc3ddd5238365b3140f3db65b45f9ef363beaa5e9111c15f96
SHA512

bef427431a0a345123e87360887b8d564309d732c251a345f0d1a221234f239b057f09b2205ef19cc4914e72b509d336b6e2df3f1bd43e73a008cc5af4314ab8
SSDEEP

24576:mjvslQRrENaTPRCChDwYd4oyxqY+xQziQn/Qqsuf+lN:csl8rEkRC8ZyqYrHGlN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7adc48b32358c405fdb502f2b868288b3757940b2b54e0b6787b1a7a242b3579.exe

Files

57b81f3bfbd7e82065190ea6a2f59849.bin
.zip

Password: infected
7adc48b32358c405fdb502f2b868288b3757940b2b54e0b6787b1a7a242b3579.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ