42fbf4768f936b594e154b259b5064c1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42fbf4768f936b594e154b259b5064c1.bin
Size

280KB
MD5

ad03bb403d62b6986ac5cbd992a26fda
SHA1

69463a3c1f29f4e8b3b95bc0b72b1097756a98bd
SHA256

71366152aa8949b5debb8ae90ac2a1b84d62636760a71806340f799671faa5a3
SHA512

7df04575bb8fac47ba751ba9a7233f29a5adb919fb3980496109c3f5c1da4aa2d950fd4c3417feeddf15a5e87b16e1d86e19436859bcdf80038c8fa4b50fad03
SSDEEP

6144:XPUPaKNzYZre70fd0w5z354Gv3Bdykhaza50F:fUypZrekJmiw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3a91172e3abf9fa8c77eaab7bb0115ea0425e45b7f7e684f9114ea5051bcb341.exe

Files

42fbf4768f936b594e154b259b5064c1.bin
.zip

Password: infected
3a91172e3abf9fa8c77eaab7bb0115ea0425e45b7f7e684f9114ea5051bcb341.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ