d8ddec12a1fa74ffbf1a7d2a52270000[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8ddec12a1fa74ffbf1a7d2a52270000.bin
Size

647KB
MD5

f189e203ac49d24772c7322c39c9ae8b
SHA1

d5d75d320454a3766828760df66cb526d257e415
SHA256

c37ea4d529dcbe1e197a4eddef23a85bba8de7373539d2f78f7737372c887b78
SHA512

110b807d69e6ef3cd27a8efd551d2565f576deca2ea98cd424f8d25e6cc126837f151b46ea15ae1f58b0ac659c5786906801b5074bfea21105dd69a704f5a399
SSDEEP

12288:4H+jYxka4onxhIh9O857VhurzsWynN+su5h7TA/sA3/jv:GGaHxKh9LvJ1YhfA/f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1d362a46e002c187e1ad022dea2fa97809a211c9ba763cfe63600d893fa3ab08.exe

Files

d8ddec12a1fa74ffbf1a7d2a52270000.bin
.zip

Password: infected
1d362a46e002c187e1ad022dea2fa97809a211c9ba763cfe63600d893fa3ab08.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 718KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ