4f65ac2596a9545959693ac12db95959[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f65ac2596a9545959693ac12db95959.bin
Size

323KB
MD5

13675d4cf15f4ce2bbbd66d78c2f2e86
SHA1

bf2ee66c777fca653bd264dde82d0a76f9b2876e
SHA256

c3b244b63f1b14d250c87de7b2e9dc2f0b9582a9a77920cd5a909412cc9eb1f6
SHA512

3f88578cef1b1ceb4189d053144951a6e62cb01b976a7c895525400409d0f8c47bd53e5d5ededc9f6353bdcf195bfb0a0dcbe42d8c94d9c0ce8ae03e73a33505
SSDEEP

6144:c6Npo9r3Cffdf6W89q8/f7xzSCsjVE+nAHe6MBUo:/o9zCffdS1q8/DFSCsa+neno

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2cc91b35b2b586c3dac8dfd91a159c78da5a9eedbf12c5bbda81d47e653dcd87.exe

Files

4f65ac2596a9545959693ac12db95959.bin
.zip

Password: infected
2cc91b35b2b586c3dac8dfd91a159c78da5a9eedbf12c5bbda81d47e653dcd87.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ