54c2639a2208ffa535cb85f92ac3ffe1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54c2639a2208ffa535cb85f92ac3ffe1.bin
Size

59KB
MD5

a9baaba650d00331f2d68d35132917f2
SHA1

bff677fb348eab1d568be1fa9b66ece5480f4859
SHA256

51ff240c03567435712a3a19351f1bcdb181ab0014a72f419a7b1bc6cddaec74
SHA512

2a5cddec973e3cdc12be3727ac5d389dc06862953c9706ca73a8cbf99b4966c81c8c87a23b9d92a1671d8e691dd2dd44b5e0fe4bec612597f5f5aaf2ac159b09
SSDEEP

1536:W1+jZtZgQTlI+WlUPODQ2jZc1uKGpLrZwv:WeZtpOWYZc0hLr6v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5f050d6ab7afc32f6800884c911e7ddf62d63bf5b102f7561bb3a488f80ef3d7.bin

Files

54c2639a2208ffa535cb85f92ac3ffe1.bin
.zip

Password: infected
5f050d6ab7afc32f6800884c911e7ddf62d63bf5b102f7561bb3a488f80ef3d7.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ