4dd94729e944943aa06102739ff3c73b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dd94729e944943aa06102739ff3c73b.bin
Size

404KB
MD5

1e89aee3087eed7a20e2fee6abda5a3a
SHA1

3980658dd0312dcd5c900de54d448c8f6497f035
SHA256

33bca9a036ddf47ea39b89dbfc0f841a6802da8a3b71d21d765ead69c58a7478
SHA512

082f441100c6ccc4286cfe542c918f321f99d7a2d6405a537a717b8f6dbb5fb14a4adc215b81f6349679766a64c9d54c8a96cf8b8cfb8c9277c75938f5723552
SSDEEP

12288:HrWlON0KkuKRk4BQEiVCs3/+FdGEZR+Lv6:bN0KXukD3WhRYv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2fd7cf13f5f32803aac3adf2ca75c5c751c8cb440a2949fb3589df003c17ac32.bin

Files

4dd94729e944943aa06102739ff3c73b.bin
.zip

Password: infected
2fd7cf13f5f32803aac3adf2ca75c5c751c8cb440a2949fb3589df003c17ac32.bin
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ