ddbd96637f15d9cfaa062b35a88b4f7f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddbd96637f15d9cfaa062b35a88b4f7f.bin
Size

186KB
MD5

ac04259a2ed41f07bfb1299af61d85a3
SHA1

92207cd66b81b9c7d40b98c2ba401eb66ff79495
SHA256

7033bc7700c5cae9f448fdc49e37450d225713a7512ca67f292fc45ac25ac8b9
SHA512

62f6870ef3197629615bb7a22187e74961334422f8a9ad3b3f355e50781f48c78c9edec2600c3444df2f31bdbd458aa94d4f05c3dd3471f3cc7f87a7dc5dd897
SSDEEP

3072:/0Wnw+8RvfXKsKaG6rNVHgYnmRn+CiEs4t46NvnSAKRKSqUEl2r6XJL8bbmIK:8vvfXKsKj6rN6YnmR+CimNlSVNqrl24h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/23108ee718a783a09baf4ada9834f4fb1b75be363b534cef6f8a63de0a292d69.exe

Files

ddbd96637f15d9cfaa062b35a88b4f7f.bin
.zip

Password: infected
23108ee718a783a09baf4ada9834f4fb1b75be363b534cef6f8a63de0a292d69.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ