de2f3feb626f6ac37b02d5cb103d1bfa[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de2f3feb626f6ac37b02d5cb103d1bfa.bin
Size

169KB
MD5

345576882701d11262617f1bfff7eb67
SHA1

619744b45d433f7c11ca32955f4929e39359b6cf
SHA256

be120f129cf870907afe2a8f5ccb84cb36b0c16a26d38fad00170cfdda244d33
SHA512

f0d56d0be87aa3a67234b693d8894aa65104be9d4a0afe2e34f7806b568b48f9335e84f034df98064b5f424197e1962b977460ef8b40467c7c292482fbb0ffdd
SSDEEP

3072:BMdDJj4fuDg2rS5tvEr0FE48KA85qnOXInH+LaFLQNr5xzHv8VXx/wzN76BDE:mDJj7rWZEr7/dn4w1NQNr/k4zN76tE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dddb18b289be6a1b30073f701322dff91f799115407af51d733c0768ae407ef8.exe

Files

de2f3feb626f6ac37b02d5cb103d1bfa.bin
.zip

Password: infected
dddb18b289be6a1b30073f701322dff91f799115407af51d733c0768ae407ef8.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ