6689bd9a5c795eedc631e5fbb850b7ff[.]bin | Triage

Sharing

General

Target

6689bd9a5c795eedc631e5fbb850b7ff.bin
Size

1.4MB
MD5

cc188238362b783c5d55497084c076fa
SHA1

d15af480f1567153ef756529bae754725a1d610c
SHA256

a6cea4f4b68b7f3dd83cbef2f154555cb1f351ad75c061c0650edefa25455d01
SHA512

02e253c04ed4ddd8d0f4f6703068149ebab5d827d124e07066b9060ba5f517c8b81df83f854ed7a6aad17110cec44392a2ec13e54ae037c127832db93085b536
SSDEEP

24576:MsEy174so8a+XbFG03/Ju5NzYwu8WmkzR2BgKyaJIEAUr/KwGpyStDJ5:Mvy174sov+LFPwuvBzRoao/KwFSB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cb4626ad921c63113e18c3aefb109f70c8e334089871133ea675d62d836d810b.exe

Files

6689bd9a5c795eedc631e5fbb850b7ff.bin
.zip

Password: infected
cb4626ad921c63113e18c3aefb109f70c8e334089871133ea675d62d836d810b.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ