28b7505a051cf6a0e6ee179ef76be154[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b7505a051cf6a0e6ee179ef76be154.bin
Size

2KB
MD5

aa94d58415c8aaee7e6a668f3402bf98
SHA1

80103bf3c43913583754f09749711adf02172ee8
SHA256

33c975fed8c875c0469f79940244f452440d47f503c961adc1df3ea9cf3fd276
SHA512

a1d382eed62169753c9489f8194422eedab3563383c592bac3e44c3697820cc8c3ab934d698bf9d9a6345eb8b5b183eb43df2471be0d17f9e2a43c67a6010e8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1895cb39da800c897240669ce9a3e39cdf129b89c05f642c98ed324dad32fdb5.exe

Files

28b7505a051cf6a0e6ee179ef76be154.bin
.zip

Password: infected
1895cb39da800c897240669ce9a3e39cdf129b89c05f642c98ed324dad32fdb5.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\jack\source\repos\ConsoleApp50\ConsoleApp50\obj\Release\ConsoleApp50.pdb

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ