ff7804ed1b38116017c4ea9434c22e31[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff7804ed1b38116017c4ea9434c22e31.bin
Size

14.1MB
MD5

fdb8ddab1443b4f0d001ea1a1e6fb72e
SHA1

3a2b3b03571e63ac8835232eb9873391e7be0a76
SHA256

8c1a679cbb8c808e98cbc87790044b94bb1d1e258605c689086b41b64b2faabb
SHA512

561b12716ca6be75a3848139ad4b63b8f30aeef3dcfb84dae4997d4c3be793d766aad8a4b11871f883a1bbaef5fe74f657a6e27e5fa414fb452a6463c4e6badd
SSDEEP

393216:uQ5NHfgWYYgvUummKD64DVuNyPGNtJL8wiw/S8xj+cjy3H:DNHFYPsmKpD0SGNtyKf+ce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7171bc88e1eda14767efb89c9ff8da5b8bb8ef65a1daa4d8c71d11026936278e.exe

Files

ff7804ed1b38116017c4ea9434c22e31.bin
.zip

Password: infected
7171bc88e1eda14767efb89c9ff8da5b8bb8ef65a1daa4d8c71d11026936278e.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.1MB - Virtual size: 14.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ