e600b6015b0312b52214f459fcc6f3c2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e600b6015b0312b52214f459fcc6f3c2.bin
Size

314KB
MD5

06ee8cf1f9b3238ccb09f4da75b9349f
SHA1

87d070bde659b5dad58c004f208472d38662e17f
SHA256

78393264f1c4e8976afccf462ee02298b293f0dde66d72d36327f7d1000552e6
SHA512

728f9d6c274d9bd42bf8b9a2100d834bb33026ce9433f22a66e7f8f0617b913de764d5aaf08519c255e7d233a6d93fa5ebf09db860e4dbc8d9a6657cb0766706
SSDEEP

6144:QkR7zlM0kfY9gzeO0X4PmmbQDR/bBxpRzMYviJYDdbgv815PLO:QAqA9gzIkFbQDR/bBvRAYqJf015PLO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/65bb6281d63ad091f8b6b4d0c460d9d6c1631fe141fe15b23dc6d23a41e094ad.exe

Files

e600b6015b0312b52214f459fcc6f3c2.bin
.zip

Password: infected
65bb6281d63ad091f8b6b4d0c460d9d6c1631fe141fe15b23dc6d23a41e094ad.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AVP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ