18a0c820fcdbe26ffe2c8ed84f79a58e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18a0c820fcdbe26ffe2c8ed84f79a58e.bin
Size

115KB
MD5

ea3291b762499f77d4ac98ddad11ab23
SHA1

57e8734dbb71b42ee2f1cda3d81f626d5997fe5a
SHA256

8c7992eee114b316319b29ec369a03f00ba9c61fb0147d3e8c5e1ef53c627afb
SHA512

731f08492eb968a72a481da910a1c4fa68078e8954f791a48d4e8b83710ab541a30895af994e5b3640288cda618b4fdd16333657165d9a144098f22687c5854b
SSDEEP

3072:l5AMVtzZgXNMxSF2GB1beE+QxEmUW1JrG54Dcqnb9XxCNfB:luMVtzZg93wg1beEHxEmRe5qxBufB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/42d6a4edaa5f2ae253f52628a1f9426e54004d3d37e81de5404f64e0472c92cb.exe

Files

18a0c820fcdbe26ffe2c8ed84f79a58e.bin
.zip

Password: infected
42d6a4edaa5f2ae253f52628a1f9426e54004d3d37e81de5404f64e0472c92cb.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ