0fcabff10f0b3659aecdcb536e685377[.]bin | Triage

Sharing

General

Target

0fcabff10f0b3659aecdcb536e685377.bin
Size

1.5MB
MD5

b70b19f693fb9e68a730574f9f7ca4a2
SHA1

6f6d9964871f208ade557407cd15357d0c7f51e3
SHA256

8e98083cac22dd4060992997a9e87c7a013baf9f70685de288f815a5f99434da
SHA512

8815c1b1d84c6090c5c49400c81dab201e53b773cefea4e1ef7fe209e6804bbadb2d2dcabe93916f566b844a52add10664445cf74a90fa2adf65c945b696d941
SSDEEP

49152:BIuYMWybctLk8D671SzABfhGy8sTW5JUM:BjYNztL8RS8BJGDsqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4c0f274e3694fbabe53bf4160108b37353cbe110eab6effadfad8dc1f868d49e.exe

Files

0fcabff10f0b3659aecdcb536e685377.bin
.zip

Password: infected
4c0f274e3694fbabe53bf4160108b37353cbe110eab6effadfad8dc1f868d49e.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ