346af980684878eb0702a6adf2079501[.]bin | Triage

Sharing

General

Target

346af980684878eb0702a6adf2079501.bin
Size

541KB
MD5

df3f368bab9bc9128b29b6a4df4a35f1
SHA1

604d17fb6ef5116b4c59375223d567fcd380bcd0
SHA256

b3b7f595e8e9eeb2ab6fe25e084b6b766e987cf2dacbf31884d96a4fdcf117ca
SHA512

cd677a2e6d9b19f0644e750902267c90d87f1ea94f4c3825ef3a79eae59b6b068e88c89776f0b408e5507f8b2b97b1ca9cc4ef283c04616ad949fc759f1dc00f
SSDEEP

12288:SXGYgGe909z188YrdM2hcR06rTaIIyTodJKbMuyvBjWa:S9z9zZih76rTaQ0tvEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3ec460aeca63f43b1c270d4c2c6d517086e8a302863bac43d7389d519c95f37e.exe

Files

346af980684878eb0702a6adf2079501.bin
.zip

Password: infected
3ec460aeca63f43b1c270d4c2c6d517086e8a302863bac43d7389d519c95f37e.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 630KB - Virtual size: 630KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ