04cb26da2d9222bf9204ad1f2307310c[.]bin | Triage

Sharing

General

Target

04cb26da2d9222bf9204ad1f2307310c.bin
Size

481KB
MD5

61c728c25b4e5b8a063835e3e9f75a2f
SHA1

40ecfcb0772f644ddb68e519a0cceb91af9b3f14
SHA256

13d3f276a58ec7259ce36fc73497417dc35deae08c16eee00b642d0d59b11593
SHA512

89d94ecddbac60b863ed180a47c043f66542000e591ac06a939d6810ca961dfb826e37d06b6c456cf20f534497c085c739e9410727d1756699b184c00fe74dfe
SSDEEP

12288:+CM0q0qmCOarovcJLdtHPGo8+vV5kPxBuyP4jwFA:+C12m7aNVel+vrkjUwFA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/bce910742ec10a1cdffe6c194b65c2a66980dff76b5fdc56c46a6d9a9f41d48a.exe

Files

04cb26da2d9222bf9204ad1f2307310c.bin
.zip

Password: infected
bce910742ec10a1cdffe6c194b65c2a66980dff76b5fdc56c46a6d9a9f41d48a.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ