5c50f0f4f7a4305464b0a9b14b33b006[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c50f0f4f7a4305464b0a9b14b33b006.bin
Size

408KB
MD5

2498af391b380971ed9c4c40108984de
SHA1

70935946fa9bee66f3ead9f39bc6bfdb5fe01c58
SHA256

de16101559cbecfe09931aa9a100441c2d344b7201fdc527c3cbca5521f8411c
SHA512

8d4b8e2f8be9e442f484590cf0008c5a7b84f58abee2e94e187ed7397de79b3b921dd9d51313477e505e307a8508ac29dbd87be583d99920caf304da6e7c0a46
SSDEEP

12288:wzIcsGS74VpJqtyYKN0fHI4qAa/avIMtLH9S:wzZsGvvq3bfH1qAuT28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2826cf1541f69a6790889af933a24db2f28fd8e04a8c5dd5ec2d7ee2ef93d0fe.exe

Files

5c50f0f4f7a4305464b0a9b14b33b006.bin
.zip

Password: infected
2826cf1541f69a6790889af933a24db2f28fd8e04a8c5dd5ec2d7ee2ef93d0fe.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ