f948d2a0310e530ae1db8e0ae15dc31c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f948d2a0310e530ae1db8e0ae15dc31c.bin
Size

532KB
MD5

46bf7bd4f109a61a90daa5e128e5d291
SHA1

747cd608ef3566924590b9ec24b8cc9af260dca1
SHA256

0e1db5e32cbddfb31d7165ae1b7dae9accf4eb4fa64c0eb1bdd2f7464f6fe626
SHA512

a3c299cd54cd020195b6d010c4d5eb618ca231dda4c330c079da3f003020a747e80f856449c1d3a9658b7272faf3e61e906d4e377a7124c19092d8409b153388
SSDEEP

12288:Sp3MXeFWxnmYs1Jiaknfb2dEKUdG8ibgFedALPYdzGxi:uMXeIP0J7kfadI3iUH7CzGxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8fe7d0ef2d9aa32d76480ed8cedd24a3d4186343d8cf99f76d2977978db05608.exe

Files

f948d2a0310e530ae1db8e0ae15dc31c.bin
.zip

Password: infected
8fe7d0ef2d9aa32d76480ed8cedd24a3d4186343d8cf99f76d2977978db05608.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ