d6c51af8146503eebc3a023123936d29[.]bin | Triage

Sharing

General

Target

d6c51af8146503eebc3a023123936d29.bin
Size

344KB
MD5

5039c1c6a5745d6c6d9790def101b1c1
SHA1

aded3763fe77672de11c0cb5736b597d46c04b19
SHA256

9e7cb21123b79ab5dcea81ff842985bcb7ee14293c22a8aa0f6b884d72bb2a16
SHA512

49fa3f2fb3375c2a3d6059fdae1cb20d7a6ed59541250c358a42abd83e761a7e6b0023f04f9825eaafe8c6c0ba13bc397adb7fb61255cdb99df935114dca7951
SSDEEP

6144:GsOVi16y8qIcfsGcfgNUmCE6UgODie38YDyj/sseNMQg/D2HVbJw6QYufso9GCP:9O8gDqXOfgCLE6BODxWsseWQg/D2Hfe3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/739cf0a20292e03993ee29ea156dbcc281e7316a319d5dbbf8a7b0895aed09bb.exe

Files

d6c51af8146503eebc3a023123936d29.bin
.zip

Password: infected
739cf0a20292e03993ee29ea156dbcc281e7316a319d5dbbf8a7b0895aed09bb.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE