afd92bc6589fb29a6ba6e54bef2dc68e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afd92bc6589fb29a6ba6e54bef2dc68e.bin
Size

579KB
MD5

a484299e4530fb9f9dbe279c67356953
SHA1

1c059783e6920b9f58a161d61e0a045c4ce29f6b
SHA256

13f01ba7c196c8ad7d27bb26051ce4ba5b5fbbe5dacb9000e71ed29b4ef90407
SHA512

67284006eaa22ba7b1a2563976adb63f5b6b15f2117f4447c5c27bc583f7d2258ac3f92f98c08fc53789a7580083512eada6fe948d22213e2918ce13ed080ffd
SSDEEP

12288:HcASx/5dQFLC2kJYsaUhsu9ePWg8Jy6FTaMvYxHxn1gi:89x/gLRkJT1990WvG/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1a245dd2d65396f9d5530ffd64b85a782218546939597f641edd40ebfaa84905.exe

Files

afd92bc6589fb29a6ba6e54bef2dc68e.bin
.zip

Password: infected
1a245dd2d65396f9d5530ffd64b85a782218546939597f641edd40ebfaa84905.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ