dcf892aedc7d0aeaced933e1bf624814[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcf892aedc7d0aeaced933e1bf624814.bin
Size

1.4MB
MD5

e23e337c672b9124b7ba19397a241151
SHA1

ed7adf1a068a736287f9c817996ee9dd6692b628
SHA256

1cc9cc4d883b082c8bbc8546c6b8472ce201ba5e989ba5aca99d1eaf1397b306
SHA512

6e83ddd62e0c12f2b2fcb6f24d0d2b55ec9a7112af6d8f4ba95a229328c5203983190588e28ce244e1facbfe22ce6fde8458ae497e1eed185e469a1e66d8eca2
SSDEEP

24576:lEYC3TI5liE94qPZT8vnsC+7u/qAvLEp0nnYLvhAxa7yKR3dGZA5dd8on1By6mSt:j59PV8v6y/qxGYDhKGyKRYi5D2BSRhpD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/206a7ab503bec7c29517d5f25869760811c90d9d475e447cf0d938ddc1b2c9c6.exe

Files

dcf892aedc7d0aeaced933e1bf624814.bin
.zip

Password: infected
206a7ab503bec7c29517d5f25869760811c90d9d475e447cf0d938ddc1b2c9c6.exe
.exe windows:4 windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Esp0
Size: - Virtual size: 868KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Esp1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Esp
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE