ceb5022b92f0429137dc0fb67371e901[.]bin | Triage

Sharing

General

Target

ceb5022b92f0429137dc0fb67371e901.bin
Size

6KB
MD5

6de57865d1572dd4805b7b78f2ec2653
SHA1

bc5f38915b800b543768e25dace4094b7f445181
SHA256

fc812abc241fc10f63ab1ceb27fc190358780a268aee14a327de914c15efb185
SHA512

bab5f62139310d4fa0786642f3a0bccdbbe8e055d67a7b01d3cf1d65a1cd96b02f3e05511a6bbc137dce46d8a54060a1ac6b4ce203ddef318cb3b5f5ea910728
SSDEEP

192:TWqLJ8irF2chAL3PHceWXLLBHzYx3FD6UreXtF8c3K:yqLJl963Pcezx1DPefK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8d2f2dce701f8dc555e74b53bfaf7a1337027adc7fadc094b2eba3bb5b688f1b.exe

Files

ceb5022b92f0429137dc0fb67371e901.bin
.zip

Password: infected
8d2f2dce701f8dc555e74b53bfaf7a1337027adc7fadc094b2eba3bb5b688f1b.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\danie\Desktop\Vikings\Vikings\obj\Debug\Vikings.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ