4c51b62c9ee7a37ddc010e48b516c243[.]bin | Triage

Sharing

General

Target

4c51b62c9ee7a37ddc010e48b516c243.bin
Size

972KB
MD5

a283bbb3ea0559ebe25f5b0cc1bf7702
SHA1

2d468b3da88d3f9ab9134326e265ddea968bd8d5
SHA256

a3402483c091c4fbe6afb054aa2dcd88a54687c9210cd9fc194b9671c31d548f
SHA512

6bf9bfe8dc7ac12c2778307a743ae9e7c14fe9c6d4b24aee557589d106fe9d969e4f0a3f278d93971e20a324db0ffa2ddcd0aaf7d855e3828ac6eb25519c0a5f
SSDEEP

24576:JtNK6/UgZTYnsE9VW5Ll6mA5bFtcjgNaiBNnYNjnK+FD1Fa/tA:DNx/Ui8cxA5bXtNPl4KIva/tA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/255d887e4aee44b4a811fd99c76d7df6ce442316125d236f9b3891bd56b82f8c.exe

Files

4c51b62c9ee7a37ddc010e48b516c243.bin
.zip

Password: infected
255d887e4aee44b4a811fd99c76d7df6ce442316125d236f9b3891bd56b82f8c.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ