477cd89aae640482eb9a9e2ef7427c6f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

477cd89aae640482eb9a9e2ef7427c6f.bin
Size

23KB
MD5

4149b55ce5fe5233fbe3138efac9ba0b
SHA1

6360cf1f24b625d27622d7c32ac0ec3a2185c75a
SHA256

440f8dadad0a7ca6eada3678bde4a66db2132241f8d1f0801d8d033b5b37d3e6
SHA512

eb6fc9ec35aaa881c66274b451531167e88800b5b117ba340bb58e6f3f27415a160d34bca8ffbbeb2b891750cb9235e65de94d47d03cebb2457b9aa6a75f585b
SSDEEP

384:czjmlED+6ew6UwZrLxmqlbr3vVZNH46kzoUtaXj17kmGD4RHyLa1yIJPXROapfUj:0jmPw6UErl7rTNY6Oo95kf4RP0IJPXYB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/849e62ba24f2f73f5f1cdc66dca6800777cf8b6361d3a01be7f919c766491cf2.exe

Files

477cd89aae640482eb9a9e2ef7427c6f.bin
.zip

Password: infected
849e62ba24f2f73f5f1cdc66dca6800777cf8b6361d3a01be7f919c766491cf2.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ