5a6e0971a54847d4cecc16bf7fa44bca[.]bin | Triage

Sharing

General

Target

5a6e0971a54847d4cecc16bf7fa44bca.bin
Size

35KB
MD5

9b29aa735b64f93b5f3afce37f1c8990
SHA1

6d8157b2199ab265239942b5e45e86db5c9f181b
SHA256

48dccd7cdd21e0ad2316fa25fc8fadbfe7b1d6088e6aa1de0d83141b2bb89e8c
SHA512

484d957abdb492ef9ad430e893a5f60a20ea6f7ef0035464dea4fe430236ca457c722e382b6a7b3c892b0e96a5a5e8b67eac6db7e1aa0a8dbef7666efff26407
SSDEEP

768:54mB6yhM7dg7eqw2HSHGl7xNRBGizObt6RNkuCdeGVk4L1DzO:CzyhM7dCvw2Hh8izkMRNwoB2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b44b1273d8b923127c0f5279cb143abf156cda0b03d083f8424c54ec4bbb7223.exe

Files

5a6e0971a54847d4cecc16bf7fa44bca.bin
.zip

Password: infected
b44b1273d8b923127c0f5279cb143abf156cda0b03d083f8424c54ec4bbb7223.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ