59d79a9daba8c4513bba1ac19c0863f1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59d79a9daba8c4513bba1ac19c0863f1.bin
Size

186KB
MD5

ebbcef4e9e8a98890231314c95d51f22
SHA1

bf7388bc402126234b26b3f600f3469986c71ef4
SHA256

a8d794a2ce097d25e24ed414e34f74dbd8237727f029c77fd12f23284fc90c48
SHA512

f96ef3b6850bbee47b6d2afde0bfd830c8f2c8c05f0893e4fb46dc1f68a7b374293a8e990d7fc2d284283855574f7caad0060acd49dfc94d4f4eab6a17694692
SSDEEP

3072:Hy2d5AlWNdy1VkxbBUqQUVjiKsHexKrz2/t4tZuuqnG0oPlK0vikzoqXSyj:SqilW2zHAjGHSFiq+lK0vikzoej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2f873636253d43263c430743c60a5dea61dcc76ceacfe280f9cedd07b1aab132.dll

Files

59d79a9daba8c4513bba1ac19c0863f1.bin
.zip

Password: infected
2f873636253d43263c430743c60a5dea61dcc76ceacfe280f9cedd07b1aab132.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ