c4ff1db06b241321b6599871a029db64[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4ff1db06b241321b6599871a029db64.bin
Size

31KB
MD5

30b7198cd2d637bf16b724575c5399a2
SHA1

b61705a67eacc62dec9e58b0e81098efd5b072c0
SHA256

d0ed42b48286a69a4e9530823a724401565274b361e303731b5bcbd1b2f7194e
SHA512

4d4b91b8ed4b867419196224ddbe33a5fb005d440cdedac1e61d9e18b5db466d4b8ac445d13eddf01876be5d05c27de1dda4196b9822bd8d37dad7257df9c8d6
SSDEEP

384:sNR2vmk+L8U/8GOdSTiZQZ+azl430yNDGnN08laLoJtiqa/MmwOvObLJ23cGZ30Z:4KmlwedOS2M+uNtDa/HHSPGSZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/af8391284e328f9637a8ae6ff5a47fb41e7999ee326afc34377c9e4f5a348f78.bin

Files

c4ff1db06b241321b6599871a029db64.bin
.zip

Password: infected
af8391284e328f9637a8ae6ff5a47fb41e7999ee326afc34377c9e4f5a348f78.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ