962b447996d774bd6b11a221ab39bd8f[.]bin | Triage

Sharing

General

Target

962b447996d774bd6b11a221ab39bd8f.bin
Size

878KB
MD5

3048a30b329a666786a214a827d9a0b3
SHA1

8fa1955487896e98f190bbe45d40d34356ad36c3
SHA256

0e1a62a6d3c082384e1fe0957ac7fa8734c5a52e47c20717ca19c46681ed7c04
SHA512

dfb22ebab3e967873c423778446cd6185fa7e71faf958caa2e5faa3b6ecc0f50748103be6a96bae33549aebddd9ffac81f3f20ad1546683a46feb16945ce3b9b
SSDEEP

12288:DRuPqLVH9RaQv3oDicjAvxb36XGFKvuToA5uBl37YX92SL25FAI8q69foyA3TDHH:IUgWcjApbwBSoAmlkt2S66fW3vHUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3752671d8ecafe3de17f8ec3a30ef23f137d8c3cd62683a13f6e9a56db5db4f4.exe

Files

962b447996d774bd6b11a221ab39bd8f.bin
.zip

Password: infected
3752671d8ecafe3de17f8ec3a30ef23f137d8c3cd62683a13f6e9a56db5db4f4.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1001KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ