6772e83599f328ad9441283dc2f0d3ed[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6772e83599f328ad9441283dc2f0d3ed.bin
Size

321KB
MD5

0e8fbc733cd2711cc71edc28f001039b
SHA1

c7cc9510038339d99aa67a5074e0ac5b0f34a2c8
SHA256

71c266213811fc28dc2769dfac6ddebc8a8aa66a087df1b5171cd32b622df257
SHA512

be63ef6b2958fc86163ffa5d61c1dc3804d2b9a023ccc3ef165c54c924e6947e5ce958f487e7bdf191e0d7dc3c1982ab7d5bd7ef1286ba0f96f001daa0f3a682
SSDEEP

6144:zFfCj0euEmTHYSJmnX1djADJvgENJQYQPSCVWH0cKWGPueGt:Aj6EmTZmnX1pADlgS5iSCVWPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ea10d9467bd603c3f84fa606ce3d4da7dce13701683efbb55359d0974a256a14.exe

Files

6772e83599f328ad9441283dc2f0d3ed.bin
.zip

Password: infected
ea10d9467bd603c3f84fa606ce3d4da7dce13701683efbb55359d0974a256a14.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\rje\tg\tg6\obj\Re\ease\gqa.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ