91c3f5ac7498a0b113a5a549b7aadbf3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91c3f5ac7498a0b113a5a549b7aadbf3.bin
Size

393KB
MD5

48d2dd38c27883ae58c3503c16d88400
SHA1

157ec416ab761f7834d96424b254d05ec8b6ba50
SHA256

08c12582b6707a28d2222c9c5bfa7362538dcc69c185aee591294fd9679390c2
SHA512

4f377e4e64d08ee56681c6074b0d12441565f9806232996cea9d6abc78ae3ddab73f3a0f4d1cc1592d1f0defc6f2143332b44c567c3ade39fd2c6cab1a4835f1
SSDEEP

12288:NCLDo+oEPmqSYPzVM0QQ+wguLLubeb4NrRQKlGJlXTaV:EUBEPmq/rVzfouLLuib4N242XM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c3cf5c8a569686df882fc43e402047967a7c74b0274864ec28c007a3d36d9fca.exe

Files

91c3f5ac7498a0b113a5a549b7aadbf3.bin
.zip

Password: infected
c3cf5c8a569686df882fc43e402047967a7c74b0274864ec28c007a3d36d9fca.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 581KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ