0c9f6ebfebc42cdcf20144a42bac6f8a[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c9f6ebfebc42cdcf20144a42bac6f8a.bin
Size

590KB
MD5

67d2ae64cde39bcc5dac5a936ae8b3b2
SHA1

0e6906b20c6ac65abfde5abb33683bc7ff852c80
SHA256

026917c3419babc4f8c115e5e20daa355dd43e75491fcec283cf7d9fce9306c8
SHA512

f5764f750da04ffd721199e4ebd2fd012872ccff79c892c68c5ed237f4e5d51081a16f9505da37b1e10ddb3f9397889fdd8284f2106442a7a81481e4f3e4880f
SSDEEP

12288:2jr8TH1zBLcWs3GLFMaM6KyhNSEZLJb4mqAr4+pmjnAz:2XEL3LqiXZV7FF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f4987dacf72e39e82c79a98402f44f83e364f4e1a96c808dbdcfd232c276fa09.exe

Files

0c9f6ebfebc42cdcf20144a42bac6f8a.bin
.zip

Password: infected
f4987dacf72e39e82c79a98402f44f83e364f4e1a96c808dbdcfd232c276fa09.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ