2ed10c1ecb18c82e28180b08eb96fbc2[.]bin | Triage

Sharing

General

Target

2ed10c1ecb18c82e28180b08eb96fbc2.bin
Size

599KB
MD5

ecadfc13c979d92bbc866651cd898744
SHA1

b8261723c957c331bf79516d5468581afc398fd0
SHA256

31dc2e3b084c3c2375f352e5f409a3b84ebecb2ba8cd5e6dbe6c575fb0df8b29
SHA512

916ee89df88b0ce59025553e059ba57ac32eb9a5bc41ed68f9e5b61bc26bad58518e0398410ebe355392f8cccea8e844ef8ce159f48fb35a709d2f581fe2d718
SSDEEP

12288:QQSc8j+FYX1Cvr+P9PGApbQ4nnl0QY2O5JG86ahNQqXV0LMQVQ61:7Sc8yC4vZKpnlhYh68lh7F+G61

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bbf00e5d04d29ebf5fc920b7bc238170a714f3b8d0de3054550fb146468a16e6.exe

Files

2ed10c1ecb18c82e28180b08eb96fbc2.bin
.zip

Password: infected
bbf00e5d04d29ebf5fc920b7bc238170a714f3b8d0de3054550fb146468a16e6.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 624KB - Virtual size: 623KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ