8b744166eecace320158f4d0f704b13e[.]bin | Triage

Sharing

General

Target

8b744166eecace320158f4d0f704b13e.bin
Size

789KB
MD5

48574142b7971d2df0e9440a6c82d634
SHA1

5e2d60c7a82ffd089a7b876720af91c314c8a7d7
SHA256

b1d9fb66fc77fcad09e98f909994ec891500dffc86c26b7c5d71239b6745776c
SHA512

d941c71e9077083e765386b017a712edf375dc1ef89d4051b962911c8dac2dd468b59d25fa97dd3c91c8073784ba2f4e52ac7177ffc0679a46660c0c1e9bae95
SSDEEP

24576:UOavf+d4FQkZ6JKKYoH9yKDu8kvLSqUOh3uwEAU:vAI4Gw6JRdyKqmqUw38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/aa7a05956ca47e164a10a94d0bdbe01123b84eb01fad5e581e1e72b10d93d5a9.exe

Files

8b744166eecace320158f4d0f704b13e.bin
.zip

Password: infected
aa7a05956ca47e164a10a94d0bdbe01123b84eb01fad5e581e1e72b10d93d5a9.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ