4800ebd004e4134b0fe7aac791f66ced[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4800ebd004e4134b0fe7aac791f66ced.bin
Size

535KB
MD5

2fe746e8a389582094dc1867e687dec4
SHA1

6be0b528391d3b313bcbd8de0b309b8c7bfee89a
SHA256

de5d23b8ebab4a071fdd4ef2f80bd143ec71feba934cd7458ee8cf5bc5a1a674
SHA512

176dc7b51ca3f8457738e7dca38ae27b8c274c7bf7f35a4f07e8d57a1c09bb2b70b2f0a654779eda37cfd7d950e274ceb4303b35b34f54de7c6f13b369a3d46d
SSDEEP

12288:i4TcxQIkwRj22qPjgSN8hOI8qH6k4F54W1hG:3TcRxqLryD/6k4FmehG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/88c57d68e2ca4a359aaf8a1d6225ce440657f02c27f2e87f61cf72d93b4ae956.exe

Files

4800ebd004e4134b0fe7aac791f66ced.bin
.zip

Password: infected
88c57d68e2ca4a359aaf8a1d6225ce440657f02c27f2e87f61cf72d93b4ae956.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 678KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ