c9f77776639ed45166920a9c06072e0f[.]bin | Triage

Sharing

General

Target

c9f77776639ed45166920a9c06072e0f.bin
Size

607KB
MD5

88e8cdcdaa1fd4cbf70a301b511f0304
SHA1

c25d1d1e64a95fd2723fa569ee93e5bce6d1c1df
SHA256

1bb20032070ea17fc8bd688b99559b7dd264edb0a8a107c95da2b9790aa0458f
SHA512

60430f5b20346bab92613210c06a13dff6938014fe1e9ab84949a57321957d1893327f0b958696abf6e9ee04b5f2b1751af1896c9932efc1b05d0ecc6bdc6f3e
SSDEEP

12288:lh0nvZ1VXSY2gCF2Gw/3Cn71y85b0t0Sqxd1Xc1Wn6fECkSxfPFJV8eIL:l2vZ1VN2gSxhwJc0fke0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/11e5b6da5d8a500f46253180e37a0258eba2de92957f9d4646966b4fba16bbd2.exe

Files

c9f77776639ed45166920a9c06072e0f.bin
.zip

Password: infected
11e5b6da5d8a500f46253180e37a0258eba2de92957f9d4646966b4fba16bbd2.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 651KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ