48fb783948e571d2ab8d08d9fdec447f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48fb783948e571d2ab8d08d9fdec447f.bin
Size

449KB
MD5

7e742fad53be0251286e9f74d4fd06fd
SHA1

92f176c0517b2e622971cd7de759e7396ea1f6ce
SHA256

3a513d23de944abee925b1e8cd9bebf3c22c6fc3f1eec8b98d0d44c29d873f07
SHA512

33634126e627c992e2e405ec819fee69d069eebe3d49fab83fb45db238a20ced08f0c6ef2a7c84a0ff9852c2234e12b5b2576ff7f36ee7d08c0ce0fd80725527
SSDEEP

6144:MMtXuPogCmKCoaUR40W8uW8r7H4pU12w1sIQkgAmqimuUnuNAXFK8nex0DKy0dBs:fX0oX0Ns8YEwIQchuNgF7ex0cO357Y01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d9e22072d4c5d48c978804312169981da108122adce941389beba15d6cee5c1a.exe

Files

48fb783948e571d2ab8d08d9fdec447f.bin
.zip

Password: infected
d9e22072d4c5d48c978804312169981da108122adce941389beba15d6cee5c1a.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 726KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ