34aa0ca40863c30653a0b6ba10d3daa2[.]bin | Triage

Sharing

General

Target

34aa0ca40863c30653a0b6ba10d3daa2.bin
Size

1.3MB
MD5

c594f8280b7588bc3aa3226e79de363b
SHA1

3efff18ea2b142610923b9dad57227f8c32cb048
SHA256

ba90f21e249436110f895833ddbb4f0da58497250cbc56f1dc60fec823e64a08
SHA512

405025856817422d13b035b2f04b251e2ec22da9e069ff4392a8831b12482db7066073d4d3c486213732acfc378d163a79a9791bd56925ee669247edc6c1a8de
SSDEEP

24576:lY8CV1t5MpNcDi/FzeyImzgYy3xtQp5IpEgVCS6da+Etlf4GhMlq76yWVGZhee6Z:mp8AiXImzgYDRgZQch2qGVGZz6hHr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/427279a267a65691961da1112b7c562ba7c707709b681c71a7194aa136066eb9.exe

Files

34aa0ca40863c30653a0b6ba10d3daa2.bin
.zip

Password: infected
427279a267a65691961da1112b7c562ba7c707709b681c71a7194aa136066eb9.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ