98ccb619eb1a02f1a2e95cd0518cf5eb[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98ccb619eb1a02f1a2e95cd0518cf5eb.bin
Size

522KB
MD5

266f2d4a68d505ae993511fc956fea98
SHA1

04b946440ef4db933e3566a00b377a8e7c677e61
SHA256

c2df16723382937838992a1266a44c6832406cb2ecdc0c9055fcb520cb8bba35
SHA512

bff91b9b3b88f03353f7532c1f048858eec46d1aeb806d2fd96792f06585e23e4653114191258d2e8db02cca78488eaa196492638bae8dc825ec24443b7cea2a
SSDEEP

12288:NV6UerNEtXpfXFc8aYNnwoPshOzR2ODN17d91W4vlGTVi9RYkkpq:N4PrNGXFwYDEicODNH91NYR81Yq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a53d11281e99e8c8a4d0ff272ffd32a43e20e5717e484587788060c71795d9da.exe

Files

98ccb619eb1a02f1a2e95cd0518cf5eb.bin
.zip

Password: infected
a53d11281e99e8c8a4d0ff272ffd32a43e20e5717e484587788060c71795d9da.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ