6d88ac981f6a5f01b876adcd800953f1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d88ac981f6a5f01b876adcd800953f1.bin
Size

666KB
MD5

aeb98426a2c18f6ccfb2f1289bb8b6d2
SHA1

bd695ad789d9fcfa93c8a66616a691196b46a080
SHA256

6bdaec8699ecd992752d0854985ae945b96beeca8f0cd70e15fd65d65a36ee56
SHA512

6f2a6b28cfa0d796a671b1a2f396b23d7774477be24b55fcf2a07808a687be0c92a62a47534e160053e2dccc8ec1b238215bcac581dfd6f958be8b511d84682a
SSDEEP

12288:tpbXAOLsh6g8LdE2YLgb0swgzYda3kOglzoKxzMkebEbtZt0eyZkutp:LbQOLsm22YLgbhx0AUXlzNSkAEbtZtw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ad9b8625f2d2b98ff577f78aaf80cd4ab30b640680135cbb2328a3ffbb1623bb.exe

Files

6d88ac981f6a5f01b876adcd800953f1.bin
.zip

Password: infected
ad9b8625f2d2b98ff577f78aaf80cd4ab30b640680135cbb2328a3ffbb1623bb.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jRxH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ