3288cbcb9aad4be48e539a6fa4329da7[.]bin[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3288cbcb9aad4be48e539a6fa4329da7.bin.bin
Size

657KB
MD5

16ce724af6a5cef87afb87829052d360
SHA1

b86b2b8d5d339a401ead8d91eefae2170aa11b69
SHA256

94f836a7e4bedc4355442b36a9943af004fff09b9038c10efa4959b1123f1e10
SHA512

6c6cf848c41c0e563981e06e2ac69e88c249e074a6107d9afcefd7f9ddd072ccf173d6e169dbce914832ae6822f8b853fa20d8721f0185bf2ccbb677c890eb36
SSDEEP

12288:Bv+3n3jCH3ep1DLUGi/UW+/1Y0vnf4nzbshcGtH5xRym0nppYCCZq8:ROnTCOsnMW4Y2ObIPtQm0nc5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/60e955512319217b4acadcb5fe46bd70a1bcd078f2d556483f1f6be819cf182a.exe

Files

3288cbcb9aad4be48e539a6fa4329da7.bin.bin
.zip

Password: infected
60e955512319217b4acadcb5fe46bd70a1bcd078f2d556483f1f6be819cf182a.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 834KB - Virtual size: 834KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ