4be18b969a717e75252d52c86746c258[.]bin | Triage

Sharing

General

Target

4be18b969a717e75252d52c86746c258.bin
Size

57KB
MD5

ee17982442f83262e81626626cced8c1
SHA1

e46aacf91aae83987e6829403fbe758c1ecdfdce
SHA256

d0fa4551e1c73314799ec4b58744146ebfb7abfe6a9dfc82f10878cc09a66f08
SHA512

dfaaa24185b786992486902b4e80407b871b4a821090885d4250082ea43307b7fc0c91bdf1b9199277dff14cbf63cd74e16138fa284790910f42b459fa514f26
SSDEEP

1536:8HJGftiYn4zP7yQ0oi4UMfLK/gYwXMy1+QWxBg58qsN3Ck6:A9OQFVUMBrX+cVg3Ck6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fc90dc77b6bb5dc681fc3fca150f3e65b3a687b0e249cbd277129d0d342bd0e1.exe

Files

4be18b969a717e75252d52c86746c258.bin
.zip

Password: infected
fc90dc77b6bb5dc681fc3fca150f3e65b3a687b0e249cbd277129d0d342bd0e1.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\all\Documents\Visual Studio 2019\Projects\temp\temp\temp\obj\Debug\temp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ