c0d2d20e9a04a884a5104c3e29560cf6[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d2d20e9a04a884a5104c3e29560cf6.bin
Size

2.0MB
MD5

18f8e064cb82e8d281bd2d50952f4554
SHA1

c4fb2239f7a9f9b043633dc42b3498ca0072463d
SHA256

c048df370fee2dadd3ccf47ce156ecf47c003f375f44b7fa94297c6de7e3252d
SHA512

7af76f6e111c17bc40362c48c0aea7f32f41ff9ed8f6c15b45d5463cac94746de60a7154da7ee4a804abe5757e408c660001aa92bdf633e37b5395481553e8d0
SSDEEP

49152:RepEH9z3591pg3yQPtmddkNh6a84V+GNuCvU6aXNPQ0voyDQr:RepEH9zv7g3zFYaBoCvUPXNPvQym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a05890b84b67d77df161a9f8fbd636c09db2081d89ea2d36040fe5d05df2b555.exe

Files

c0d2d20e9a04a884a5104c3e29560cf6.bin
.zip

Password: infected
a05890b84b67d77df161a9f8fbd636c09db2081d89ea2d36040fe5d05df2b555.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ