44b6359226d9c9ac0813792def47aab2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44b6359226d9c9ac0813792def47aab2.bin
Size

173KB
MD5

106c47a10ba8a659593bf8037d4dd86d
SHA1

fc76089df4f8562cbbd4c8f7dc75855d921fdb93
SHA256

9902e6320959e21dd53999cf1be15cd12d46f5158e4bad9c6da0a2ff233c3b37
SHA512

1f104babf94256473beeb3e7bfcad486cc19e14687cf79180ac78c56836c8dbe59910f47d5eac956b6df849e30728997eb4a0ae732e5f48b41b614f077cc634d
SSDEEP

3072:JSsXzenUtw1MGjBh37arpG8wIxQn80gJguq9SptT5gNkBwXZXG+mvHF5YAx5GtUv:0EeUtw/hLarYIa4FASpt9gNWXvl/OGSi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8df62a1cf269063152fea1a1c73eb7322ca98e2d7d7cd4b4aa646ab639d8ee9e.exe

Files

44b6359226d9c9ac0813792def47aab2.bin
.zip

Password: infected
8df62a1cf269063152fea1a1c73eb7322ca98e2d7d7cd4b4aa646ab639d8ee9e.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ