8792bce534a56fa6f541ff31ccffaa16[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8792bce534a56fa6f541ff31ccffaa16.bin
Size

1.0MB
MD5

349d46b43378454e686a081985af4618
SHA1

e95091febc5a354976c14b0e0b0fc824f50f3587
SHA256

5b3133cc771c2f620a0fedb031d8bc070bf6ba497264a0712a0dad5b85e5a505
SHA512

c69d1ed76f80e437f0bf047b5e77f3b1ecb61dbd1dd0d09d22f45c90ccc366bff4f9b8d819dfebc4fe31ce8270d8e13628f3f34f214f6b688461a7fb81b045f0
SSDEEP

24576:W1+EvuE1XvO5EEjvh/SJQKcNydcacM5CFAYLkkZCPiQU:yxGIXGmah/SaKcNydcwAbZ7QU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/47cd1113ed19b73c01e4a7d951409b8efb78ffd286f24ffd0fa30a2901cb85c2.exe

Files

8792bce534a56fa6f541ff31ccffaa16.bin
.zip

Password: infected
47cd1113ed19b73c01e4a7d951409b8efb78ffd286f24ffd0fa30a2901cb85c2.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ