c000b09471d65a78c865ef626a7f82e2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c000b09471d65a78c865ef626a7f82e2.bin
Size

961KB
MD5

f236d1093baf03a3213c84c673c5ecb4
SHA1

44559a354e6d2d87ecdcbbdf038d6c02eb8d8d80
SHA256

9283f91b2eb0ac1ebc47473d11c52b85e96fdf80a8cdea0aa4f43adbb55b93ae
SHA512

1e79dc7ca6bca8dea1a2cad098475e73261f7b29bb59625b91992c18bb7f783a7f3c8708f027bbb8de5ef3e73d9cf85d3c198d5de8919c5effecc5b8761a10cb
SSDEEP

24576:9gZCuxfk1oTwXl4qGXQFszpEJUSb4Tz+cw6XrZH2bH:qCGM+TwWqeMUEO9zSOZH2j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9267fc3af8040cbf3f53d4501c063d70e54574c98d7133a5c18c8d5b9686d901.exe

Files

c000b09471d65a78c865ef626a7f82e2.bin
.zip

Password: infected
9267fc3af8040cbf3f53d4501c063d70e54574c98d7133a5c18c8d5b9686d901.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ