447e93aa44abb9cdebf8260f993aa010[.]bin[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

447e93aa44abb9cdebf8260f993aa010.bin.bin
Size

379KB
MD5

9e5894280098d75fb4d16a907e273c16
SHA1

471477f7fafd9c3e66656a6b89d0b88642605120
SHA256

5b9cbaa25296d3e561e04f2f8d68183cec14be1f8c24b8af509ea54c37849b81
SHA512

32030f6a4e59bef44287a1a0570ccce500e88318a8a45c457d01bce2f89b2976542f9f468023c3a33bc5af6ba1e7d602ef62a7f74a1e254853b7f03667b3f4b1
SSDEEP

6144:affOW/JySAhl6EUT6/IPky2ukbAEuTeqNLqouJwFHbHdkd9/iFO:aOW/J+hTUOIPkyNEuaqNLrv9kP/wO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/619d0f22fde3e64e9a65e98b056cf63c1fe446025a9f342f780adfc8e1f456ce.exe

Files

447e93aa44abb9cdebf8260f993aa010.bin.bin
.zip

Password: infected
619d0f22fde3e64e9a65e98b056cf63c1fe446025a9f342f780adfc8e1f456ce.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ