28ce96fc407198cb3eea5bbbcff558fa[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ce96fc407198cb3eea5bbbcff558fa.bin
Size

573KB
MD5

72912e2b5e32dd6747c6d5424a964b0d
SHA1

d9c5929a3819ceca19791aea04b24f9844840443
SHA256

fae2131f3539c1965d7f95a94a2e7d45f7b446c7453a3a6e9eda9f98be937446
SHA512

fa9ffe2a24a919c93f2cc034dc0887804d3fca90ba14d3d576e78c0883640430488fb3f377c4cd28830cfafd315a7d5743b7bebec9979a6e5ef92ec7383cd967
SSDEEP

12288:j76GvxNC0fSY0hkhyi7/CGpiwppXI4F5rGQApek4Yu2:jbPmK/2Gswpp44F5s0rYu2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3c37f0bd658fddf5052676b7609c1e2331ed84d48a30d7b522652e535f72f7d8.exe

Files

28ce96fc407198cb3eea5bbbcff558fa.bin
.zip

Password: infected
3c37f0bd658fddf5052676b7609c1e2331ed84d48a30d7b522652e535f72f7d8.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 597KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ