37b1b821034ae172fc764bcae08bc5ca[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b1b821034ae172fc764bcae08bc5ca.bin
Size

15KB
MD5

989affef925aba44bf5dcb9548d4349f
SHA1

505b47a89791b371b7eb165fc3c00dcd186b1264
SHA256

2ac07a1222c40c13e06d352cfbc0c7f37d5edb02c33f22fe664bca0a0ac18e63
SHA512

5ac0aa40ba0f9a644e0836d233fec8d12ffc91d1c3726dedc1869a3dd940dce8ce786ecbadfa70148c508a375a29a40edaad391c67aabe870afac5f147bf41ed
SSDEEP

384:9UB7+MeFx1T7c7F5BucNUIUj19/pHPAA0I27dPT0U:uNKxG7/pNUDj19lAA0Icdb0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0108e07d10e0ef3a092c1490e3570d4740e2906178f2f997458a3e2a89cba33d.exe

Files

37b1b821034ae172fc764bcae08bc5ca.bin
.zip

Password: infected
0108e07d10e0ef3a092c1490e3570d4740e2906178f2f997458a3e2a89cba33d.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ