b7de42db6732cca194950ed4b2958762[.]bin | Triage

Sharing

General

Target

b7de42db6732cca194950ed4b2958762.bin
Size

172KB
MD5

75803f586257f38796c47729f75fbd58
SHA1

e5e8189ac812417392c1ea27322a5e38b7bc3bcd
SHA256

ddd313c998b0b2e2b3b996adfcf787455d2f28d8588c9695c9e4e926187dafbd
SHA512

355269082cae76be2363ef89f95fa65b112e1072fc9da96135da53ceb13ca28f05086f89b08c20071ff3580f2e6197e9fd909a35a32aa24390b84abaf418fde7
SSDEEP

3072:Ks6vSSu2P+yo4g/Xd8BfHlowbxanrfU/4DvsMPfoWL9JLtiWaRSTnsv/:KJvXjguHlowbxarCevscoK0Z13

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cf8e5046effb930f4cbe727954ff23e2f02d6a91257ddca491d080f07018c5b6.exe

Files

b7de42db6732cca194950ed4b2958762.bin
.zip

Password: infected
cf8e5046effb930f4cbe727954ff23e2f02d6a91257ddca491d080f07018c5b6.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ