7379781cc4f036054a368f924[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7379781cc4f036054a368f924.bin
Size

11.1MB
MD5

56849752fb4cbb25868188a21e606dab
SHA1

f448f9fd773e6cc9c433386c630e0320bcf509eb
SHA256

3d4c119d3eb6aa29b9759c301ab5d15c06a3c570592c84239d067a9a11e2936d
SHA512

5f0799352f22b84260e3c364fa3547c075c5bff13883c400ac8b49436031a8e491b3baa458fe40e5d47e508b109f57c2cafcd433d7a9de8e1f93e867c34ce704
SSDEEP

196608:6AGJguU/CRdTsdI1y+3dvYv5eZMaAuv1N4NszjwjGrbB4d0u/k8C2vHDdN7:UJgFCRdYv+dA0Cty4NKwa+d0uM89Dv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a8a85e6faaed6a3dc5687d05b92a9f181e0d986eae1b4e1d731c221990920037.exe

Files

7379781cc4f036054a368f924.bin
.zip

Password: infected
a8a85e6faaed6a3dc5687d05b92a9f181e0d986eae1b4e1d731c221990920037.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ