ed9393d5765529c845c623e35c1b1a34[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed9393d5765529c845c623e35c1b1a34.bin
Size

724KB
MD5

6be8fefbf8712b0bd76a75cae6cf241b
SHA1

1e2fba40505ff31c26423748d1257d63154dd4c8
SHA256

5a7a22583f13856e02895ff5791b6933b724753f3f9b18d417c53920796bafef
SHA512

536023be80a1735f842bb92af2478cdfe429b55eb284e12ff5bf480ebf8054418ee8edbc158b6f619b217692c34a5096f9a2cf5b69a7c55abf9c2844890f99ff
SSDEEP

12288:hjJAYRzy5BxkSYdVrBBMELsXFyA0uMsekd5aMqwQplA73nf0ZASBaXcEkLBwAGxe:hdAh5BDu7MELssSJIMqBpO73smZ8LW/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/53cd2428c9883acca7182781f22df82c38f8cc115dc014b68e32f8b1cdbf246a.exe

Files

ed9393d5765529c845c623e35c1b1a34.bin
.zip

Password: infected
53cd2428c9883acca7182781f22df82c38f8cc115dc014b68e32f8b1cdbf246a.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ