1bd2581b223e18d2d665f541e3f0fd2d[.]bin | Triage

Sharing

General

Target

1bd2581b223e18d2d665f541e3f0fd2d.bin
Size

542KB
MD5

2df84a5a2a399d90ff6cd5720c3ed900
SHA1

01f65840ebbfc631a06cb20250fd7f68d16b819f
SHA256

0743dbf0778f089702f0d30f57c4fd8ba34b7b06edb9491d9fd634ac44b83854
SHA512

7c6f58a8c27f49725de462ff3c2042cad57f33f42a3ec49438fe427016de305ae05a6fd0080c09c66cdd4dbc884106433b9030e4f677bcc0faa480b9bd611e08
SSDEEP

12288:55PVz6epUTY+pjtgJmvHjMXIwvD+x+pvUhHMGTLz:Zz6eWTY+TpDUr+xEqTLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0a3d3fb75a8077235891bf0ff7f677e6793fcfbe7c910fcb1cc9da6492c98873.exe

Files

1bd2581b223e18d2d665f541e3f0fd2d.bin
.zip

Password: infected
0a3d3fb75a8077235891bf0ff7f677e6793fcfbe7c910fcb1cc9da6492c98873.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ