7776882352548456cfc6f9827572d724[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7776882352548456cfc6f9827572d724.bin
Size

88KB
MD5

afba4113ce6eca53160b6bb194dfb9c4
SHA1

8efd801c44925189d92987a0ba123143de2d2dbc
SHA256

5536b8a5b1e58aec768e5b9072adc306daf5a13cfe7292af4865915c2359b876
SHA512

c53e942f3e32b9a461f037f9c9ce64114e54343087c068c3c02fb038dd17f18891688b7f3c971c44071ee5b54201664f9ea0dfddbabc52e7e136d0372000abd2
SSDEEP

1536:63taQniKXsJhBpq3cCWeVAFitmdHY7Y3VfSKZZHEeNZ1JTlqBeCGHZzSHm:kiK8vbq38eVAPlVbZNTFWiZmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6a850e209de722ad4f57dd68f8af405d62ad6557772717bbd86052d1fe43910f.exe

Files

7776882352548456cfc6f9827572d724.bin
.zip

Password: infected
6a850e209de722ad4f57dd68f8af405d62ad6557772717bbd86052d1fe43910f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\danie\source\repos\debug\debug\obj\Debug\debug.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ