cc1813159fd550c85aae1423853f3307[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc1813159fd550c85aae1423853f3307.bin
Size

536KB
MD5

781d47b7531c56f023addf942e3e6491
SHA1

49006526c45c204a46360a2b58c52b3ce1c2b491
SHA256

a07bfe0045b2e098152418078bd90e9954faf317407e015116c57e5c935a1a5a
SHA512

3bbc370086f7d767b81df91bd33ecd56886c0c95aca2f198deb0612223a8f9e3d4d8a582358219f40b4767cd05723748967ebd29981041e450dab6d1c69da6dd
SSDEEP

12288:/UWhehH58Ok8Ltarf/ZsM49CxkevIbhi1COuC7w:/Wq0xAf/ZsM/x9vIbhi8vC7w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/84a8f72750a06cff2cc98a0d4b012821666e089304cfdd3cdde04866876a8fa8.exe

Files

cc1813159fd550c85aae1423853f3307.bin
.zip

Password: infected
84a8f72750a06cff2cc98a0d4b012821666e089304cfdd3cdde04866876a8fa8.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 771KB - Virtual size: 771KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ