c60884d329d59d47cf70cf94a62477f6[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c60884d329d59d47cf70cf94a62477f6.bin
Size

808KB
MD5

bf1c05a1fee6b7e60dd7c30fa9c4df76
SHA1

4d7d60cb4317075bfe82b863931de41ad5263a91
SHA256

a77ac229f68953880fe72e3b4a3313dcf7838fef4e129e29d057b6e52db68d64
SHA512

d81bbacb72355e84dacb4a4e121a8fae2343aad3049bca3df37a733224408406fc2a544f9d51dc9bdbc5aac95258ac2f3fbc273bdd1a1602d1633c7b5577a005
SSDEEP

12288:/8U8YIcsY+zK0EEzGaMmjM7kmzbX5sb0TXCLYKmE+4dZqPhlpiVwWBdk73cYPMhy:X8Xfj6nmjvEgYyL7mE+4jSri0bB0Qryy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a902154848550557c9aeecc7ad6f69ac12a6d97463cd282df84256ade701c55b.exe

Files

c60884d329d59d47cf70cf94a62477f6.bin
.zip

Password: infected
a902154848550557c9aeecc7ad6f69ac12a6d97463cd282df84256ade701c55b.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 758KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ