d63a92cf5a868ccdd3920f9c6ff2a570[.]bin[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d63a92cf5a868ccdd3920f9c6ff2a570.bin.bin
Size

199KB
MD5

bfc0afbec6864446eca12f78b422982a
SHA1

1f333ffc5b778413f5bd33cb8726affa5633d81e
SHA256

376e4fd76e6064543b451abd894b2cc7e984122894b953364c8b2864b24d5319
SHA512

b17746cfa70cd2c2693a3e979262b2a61596d2fc56d4be471ade676f133c74fc2d8823200bbbcab7871216551d5c63dffb488a2717cbde3e76ff906cc4e094c8
SSDEEP

6144:zPJfzw3MyJLtnzE+uYLQLcuYWqCkuciat8Ktii:tFypK6sjZdy/t86ii

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/07a88398e274a4ff54069949baef5fbbadbedd20052ea1289730a5130b555652.exe

Files

d63a92cf5a868ccdd3920f9c6ff2a570.bin.bin
.zip

Password: infected
07a88398e274a4ff54069949baef5fbbadbedd20052ea1289730a5130b555652.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ