1b05b62bf3dde1043a12ed5dbb519d74[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b05b62bf3dde1043a12ed5dbb519d74.bin
Size

22KB
MD5

4ead10c06eb3fcb4e9077ddf3a4582cc
SHA1

667f641da1d0a43356930178c56655cc3879dbf4
SHA256

7c251b7318694de29e64c0b3347384b2512af51ce38ffb24247fff2950ab7de2
SHA512

6942a2060f1c1dacf7a752508e158c933576f17684c4253a78c7802f63fbb804be0b1c99ae92ada7e582a1bb32f70a46b641a907eb55671d4b97a2c08fa27c72
SSDEEP

384:8ZHNh/Q+j6MPOuxKP+jaR+AHPdzt8KiVOcpFMg5+0pEN1iSgGhzTqPYZQ7sPie8g:8HNOFjEKGGBFOKiwcpF3PpETjzWjbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/45ba5f7c168cfa2a68d8f8d448ee037d35fca5dbb7e9d4deb55f8e0ba97ceacb.exe

Files

1b05b62bf3dde1043a12ed5dbb519d74.bin
.zip

Password: infected
45ba5f7c168cfa2a68d8f8d448ee037d35fca5dbb7e9d4deb55f8e0ba97ceacb.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ