c48b9c850349fc52638fbbc3d8b53b82[.]bin | Triage

Sharing

General

Target

c48b9c850349fc52638fbbc3d8b53b82.bin
Size

530KB
MD5

c58a9c11d89588f6cdfdeda8afe8407c
SHA1

718e93fc94bdaa24de726dfdacd23193d333bd46
SHA256

d14dedcea9f0e41cc397217af395a5dea92ae0834b381f73a04a6c5d6b094b46
SHA512

fb6c874e0795251d0b3392349734513d9099b0727f23a89550c430d36df29c20eae2d555e59c96fde246be21ef58b39a7f39e2cfc49c562164215413ff6333c4
SSDEEP

12288:8As616SKYjK8U66NnbsHiezYy3qjxAjyI3HBL:l6DYOnNn4HiOY2ixsyIXBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/876fbd2b5fb59bfdb8b09e09a99d3ff92428eddbbfd096af61364af56de20f0c.exe

Files

c48b9c850349fc52638fbbc3d8b53b82.bin
.zip

Password: infected
876fbd2b5fb59bfdb8b09e09a99d3ff92428eddbbfd096af61364af56de20f0c.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ