42654b2d18f4bc0e931da0a192b53975[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42654b2d18f4bc0e931da0a192b53975.bin
Size

221KB
MD5

ef0292f5637be58925bccfdeb8734d91
SHA1

cbd3459ddd102a50c2b91fd45aa35ac4f7343e40
SHA256

13de864df6fe0361f3a5cdc2fac5a40cd2d57b0609f4e6e57ff6f5f4b292b4aa
SHA512

db72a667db2cc4f596d4d8c0c8a9a8bb7c177228f69eedb442b61c4ec2f5ad0f2bd0e1826e1e15bf343e954550aca2e8a1e6272c49177ce0393e8766fa3cd195
SSDEEP

3072:3qeuS67ezFdyS+N5RlMPcDu36Wmih0CuWFpON5pPaTQd+d9pt5HcfWwYxJWuHmAm:6rSrz7yjNPK73giutWiN5UcOV0WDHm8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a93fa90a744a8c44f1612348d5502cf81b836724275dc3367733ddac3e978f66.exe

Files

42654b2d18f4bc0e931da0a192b53975.bin
.zip

Password: infected
a93fa90a744a8c44f1612348d5502cf81b836724275dc3367733ddac3e978f66.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ