20ecbc56aa1a151c24849914ed4c7601[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ecbc56aa1a151c24849914ed4c7601.bin
Size

611KB
MD5

6d1d2a91d9ea79ed7913fefc8488bcbb
SHA1

40f25b87da2bcf3c028a5c645e8eea99bb5ded0c
SHA256

d5e1e5da8ea9e40b2bdf92a8a292f63c6f2f41b9b01d4ecb95c5625f9279aadc
SHA512

76afeecfcbff1252674f42570d7b3d8294f45f2886b102266958af128ef877826456b6178e36354eed8b91ab82c65e62925361c62def48085dc795b6d15f432c
SSDEEP

12288:wMKTfya+ReHg/HTqPr3j+4MpAmTHtAwr4TlHZ4NIU8XHQY9rZKxS4I/:BOy/sr31uHtA/NZ4NIlXHv9rZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0fce8ae83f10479e24aff84627d2cdabe5f656b9e2db600a136b37c818b7ca8f.exe

Files

20ecbc56aa1a151c24849914ed4c7601.bin
.zip

Password: infected
0fce8ae83f10479e24aff84627d2cdabe5f656b9e2db600a136b37c818b7ca8f.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ