1485954a5dc1e5aacfded2a03e1e14b1[.]bin | Triage

Sharing

General

Target

1485954a5dc1e5aacfded2a03e1e14b1.bin
Size

653KB
MD5

7ed800ed2f761a11da546d1d333953e8
SHA1

1c474d9d2f9c2ab33639856e85c2466f84077601
SHA256

b39c04e08d0334cffdd7e2980c810c5e82e81d155d530bf7672d7dfb0e5b4479
SHA512

b99abfeb8bdbc03956971f55572f1418eeec934942069b64c3285937487efce98f1ad0eec7e0b7cf2beee5776f9186c05920e6611f0832c87fe81966548e5db6
SSDEEP

12288:jGXNHxaSUmi7oVk3fpu78HY+5hdr6ujYZGyrYb+jQKtyQqz9m1phhNZlIs:jWbaSUml4fpum/TdB0ZBc+jxIQi9m1pR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3315bcd2571eaa4f2730a093f359224d554943d6e411e74be1802a9deeb6c136.exe

Files

1485954a5dc1e5aacfded2a03e1e14b1.bin
.zip

Password: infected
3315bcd2571eaa4f2730a093f359224d554943d6e411e74be1802a9deeb6c136.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 789KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ