80b56ae302fea7f0f9e00b63f7ad598b[.]bin | Triage

Sharing

General

Target

80b56ae302fea7f0f9e00b63f7ad598b.bin
Size

541KB
MD5

b66da06051529aadedbf92f599fdf230
SHA1

40cee25a741e5f97a33185e256fe0cfe8da92e58
SHA256

b4411c6b081779cf7117e3df450546bb06b4ada8fa6d57e29d0504da4a7ff968
SHA512

017e2eabaa9c9f1084ccf5bbdabab6a02db17f164bf7d73fd45fb5baafe21ebba26db8a9d502ff48fed1478d8ee1c15fbbdfc03bc31e41cf2233c5b1c89c91b1
SSDEEP

12288:SuABzMFNgc7TDGDeVjiqDtl3Ua6EkgxbQR5F9VdXelU6yRGQy6mry:jABQt7T6KVuWbG1gOXjVteO6yRnmW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/82c8e9440da130cb3c991bfd2b98afbf11fff2be9acd3e56b3107096a11a69e6.exe

Files

80b56ae302fea7f0f9e00b63f7ad598b.bin
.zip

Password: infected
82c8e9440da130cb3c991bfd2b98afbf11fff2be9acd3e56b3107096a11a69e6.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

EUWD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ