c1a11ffac56b93b9c43646e9d599d349[.]bin | Triage

Sharing

General

Target

c1a11ffac56b93b9c43646e9d599d349.bin
Size

610KB
MD5

b38c9645c11bb7004dab3b1be55af529
SHA1

d552afae163b16b347617f817f4ccad70b05a2c3
SHA256

5ce2693299f0228f9b608183a18aa93f308113f5bea595d36492e783f8ca193a
SHA512

0fe4b97e7902bbd7f285dbaea8995f7ab85479219413dc55a52c8b467437850378599ff6b4880c3beb2ca1b81bb20ac1261fdaa8edf3748a3ee64948f697c832
SSDEEP

12288:NjVVaZhoNPslt6yqb0UbsLNYGFIP3rXRhQiZUhbAhwhW8XqCcD/Kdaeqo+R:ioNPsf9I+pJKPbhhQA0AfeqR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/460b3d8ffa0929ab9c02a94b11fe08737b1e8e3d0b9d44a8dbf7dbccc6a540c1.exe

Files

c1a11ffac56b93b9c43646e9d599d349.bin
.zip

Password: infected
460b3d8ffa0929ab9c02a94b11fe08737b1e8e3d0b9d44a8dbf7dbccc6a540c1.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ