5b1984f2410016c4586cf31f4a5bbe7c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b1984f2410016c4586cf31f4a5bbe7c.bin
Size

692KB
MD5

614ed1c083036e4fb0402e16d0f3549e
SHA1

9a6a3c8a5e6b924b83b8046b1bede73ec8d113bb
SHA256

ffdfbf77083837106e4278e66f745d970e3ed14d811383cb97b9d4892cb3106c
SHA512

d3abb04933cda5faf31cbf82a5945e9a5767ab7d4213448db01cd610657b5f5cacbb5349d5f1a2d1e44f0d32c63b8b7b3ae5fc88537ee1f9667ef47083381a9a
SSDEEP

12288:IeS7SevHRLl/a0SDugGPqSyVsHmx/nj1IUh5:IuUDjSDugiLHmx71IUh5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f4bd1f9dec0127be05780b194dba31eda1a4882ec5df8e46c93aa6b58a5f337e.exe

Files

5b1984f2410016c4586cf31f4a5bbe7c.bin
.zip

Password: infected
f4bd1f9dec0127be05780b194dba31eda1a4882ec5df8e46c93aa6b58a5f337e.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 779KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ