ec183e041778c6a49ceee0a61cd1443f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec183e041778c6a49ceee0a61cd1443f.bin
Size

292KB
MD5

9d102dd89f357027e4b97a79988478f2
SHA1

14da58c1bad5607340e21162fec9a04f67ac8cbd
SHA256

ef39c5f014cf2d8bae204006b03c22f7b5d7e810b905fbe0c85cec6338df55df
SHA512

7977b3ae1c409cec9aa82646b0ec2fb89a3d655aa6ea27d7660873e0169b9e10cdb6d439234919c384a9a966876da5dc498965b32f29c07b7a085c41f954bb6c
SSDEEP

6144:NL9bfeRhpmrMHvmc8ofpcXo/26Mn5RRyaHtupOqwgsJ/O3E6Aq:GKMHec8of2XoS5/ZuQqwgYyElq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e83c936284c01b25e56b7254c2bfb436416d07523283df152f6a339ae70bb2bd.exe

Files

ec183e041778c6a49ceee0a61cd1443f.bin
.zip

Password: infected
e83c936284c01b25e56b7254c2bfb436416d07523283df152f6a339ae70bb2bd.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ