087a92aaf0a59bf4f54fafaae7b6a027[.]bin | Triage

Sharing

General

Target

087a92aaf0a59bf4f54fafaae7b6a027.bin
Size

561KB
MD5

fbac3679b5da3a83f23bd73276490ee0
SHA1

bf7736996d67d27c001d69f549e8768d135d6f01
SHA256

78298d690a8b4d0455d184ca19de0a9f50466f1a88f0da979970230085df30fa
SHA512

43699d993d195a49ba1ccb6dcd25973e2c50e351f152000b33b454ff715edb9ff9ac0b578d0b1ffce37eca3c1ac5fb696a20f726c2fdbb49fe3cdfbb8fd5c2a8
SSDEEP

12288:FHTyd+EVnGqDv6kotzQHirCJlAxV2XFF43XFHpinH4QAmZk:FTbWfCkkciWJYe43enk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/09f80e5b22639c198be1ef13793c7a0ade764ed89b20a0f09ab0830f3d77eaef.exe

Files

087a92aaf0a59bf4f54fafaae7b6a027.bin
.zip

Password: infected
09f80e5b22639c198be1ef13793c7a0ade764ed89b20a0f09ab0830f3d77eaef.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Auzf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ