c99108cc3bdd92990823a1606d594037[.]bin | Triage

Sharing

General

Target

c99108cc3bdd92990823a1606d594037.bin
Size

511KB
MD5

abddad87b6f0ff29ae6e024b919e684c
SHA1

e8bfe39af7211d08e4c8002ffd9ccf27b1f90569
SHA256

3610739beae4669713652e06e8d4cdaaff4b1535f4b3f91c5a7b6435e083ab32
SHA512

257041808ca0ee331b4032094b741d529acaeaddf82886b93e44bcb706c8ecfa3b651bf33b14d3336fea2a5ca81129a1ff299a2e5d8e2f7b161fa89a8af8aeca
SSDEEP

12288:wgN41kBMqEg3RR32Hl7AyEApw79AxyzOPTmwyWSrGb:wgN5xw7FzW7+xyzOrPiGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2da6801a33c467753ac2944cf1b5e1dcb2396935e4f8eb057c0319e98b1ad23c.exe

Files

c99108cc3bdd92990823a1606d594037.bin
.zip

Password: infected
2da6801a33c467753ac2944cf1b5e1dcb2396935e4f8eb057c0319e98b1ad23c.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ