bf3d99c0ea605559e97c521b852f94d1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3d99c0ea605559e97c521b852f94d1.bin
Size

4.3MB
MD5

3ca7605232eb797cdfc81cdc5aecaa50
SHA1

caf97bfd087d792c1c2cb8e6cabf1ab717e3aae9
SHA256

f92634eee7890038bd5c6a343a753f3825460738c3670f5dd38e537dcda502be
SHA512

09cc382e878df8a3587b386f4a596c95f9babdbed4a004f3e5634ac4ec949be1e7b41f6d1bdfa19eb8b1983acfe193f506914eee445787cba145b676f2424545
SSDEEP

98304:+/AgrLFXIbMe2S3QtqBt8F/1MeG9+VdsQl80lKj33p/En9SSlm6f+YF:+/N3FXIbz2eGN7G9+VdsQhEbp/KDf+YF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/32d54ecb913de9d4a1e9093092ad20501db0aca6e919b45fc6e73df6579a1ca2.exe

Files

bf3d99c0ea605559e97c521b852f94d1.bin
.zip

Password: infected
32d54ecb913de9d4a1e9093092ad20501db0aca6e919b45fc6e73df6579a1ca2.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ