4f00274ba9cf0c94c9fa92dba45881da[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f00274ba9cf0c94c9fa92dba45881da.bin
Size

595KB
MD5

97e97979b4c822377ad34fc9954800de
SHA1

aeeff3ec04fb125dd015319df6a36fe6bb3f9765
SHA256

cd7cc81d1c2c214fe2dfff6dd97e84cb500406290fd0d5b98785f2373c6ecfb9
SHA512

b6cb908ef8dddfdd7b32332deb9de6268b6fe5ac2dbba5b4fd09f30d47dc8b408ba2472daa4766bc297167834c748a33caa2c4bc2e7c02109fa5a89ed6e49bcf
SSDEEP

12288:NG/4HG2P7MTDjg1tJquWcR8sj4kGwXPoY5/X345DIw99vm5dexSGWgZ6B4PH8xuT:NGo7YI1tJ7jdn/N5/IZJG2SvgZC4PH8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ddf7770047bab26cd3cc7752df568dda1b03789739ed404e3c5143bf0abba51f.exe

Files

4f00274ba9cf0c94c9fa92dba45881da.bin
.zip

Password: infected
ddf7770047bab26cd3cc7752df568dda1b03789739ed404e3c5143bf0abba51f.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 790KB - Virtual size: 790KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ