sample_0[.]bin | Triage

Sharing

General

Target

sample_0.bin
Size

28KB
MD5

9b53f40354ed59b7f3493aeaa833d5b2
SHA1

49b9f95f7f83095894d47180e8af0e63d67fb610
SHA256

18a9e61a082feb6c7e04d9aef4a0a0d5db926158562e7d3d408413fc4efdbbac
SHA512

0329ba980762b60b25bbc899e46ac08da78d4a594591fb927b4f91c9185f040b95ce40b919768914ed07672d7cc9a9c8672166b71f617da2ad338ad743c54f9d
SSDEEP

768:XIuOxI6zWJd1rFSuw6IilCS/Wh7GjcIfU:XgxI66JUurNCSelGBU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sample_0.bin

Files

sample_0.bin
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ