1f2c6935c61d49280d0045b8f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f2c6935c61d49280d0045b8f.bin
Size

523KB
MD5

a044d9efcb321c3406cd25044a35d0e2
SHA1

b3c8a920934a039d97b28413919cc4cada9546b6
SHA256

59b4440b54af5fcb9d90f830560e8bd411db2395b5ca3cd74bdbe0a456cc69a0
SHA512

d3770ec5d14107447d714532fbd8a426713674dddee8e50034482a95ed3f36e4e9c8351941d06a2001fd8e819ab93235ae6fb77342677ac44d71e461283a266f
SSDEEP

12288:5pD+kUTxGI6xCZUKy5lMFBUdO8Uk80QISQ2oACWfV+8UQLX:5paVCx8vGlM8ZdQIF2Pfs8bLX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1d0cf9a5e034371075cf0a328d98c53f4eeb74325d61ee956222346ebb1f5497.exe

Files

1f2c6935c61d49280d0045b8f.bin
.zip

Password: infected
1d0cf9a5e034371075cf0a328d98c53f4eeb74325d61ee956222346ebb1f5497.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ