3cb9efe410a2ae4089859816ecf563c9[.]bin | Triage

Sharing

General

Target

3cb9efe410a2ae4089859816ecf563c9.bin
Size

994KB
MD5

04ddf33c6a87c5e6d6d6e8f450f20f9a
SHA1

aee8df69bf5e23c2e0cac95b00b23ace012bafa0
SHA256

ac6e5775277e05d8e2d5dad7ca3493bab1c801974db6c53de4e31cb187620dcd
SHA512

7aceec8e8b1a7d2da43672462476abbe9facc7d903e09dae63b943c7d08d7ad079ff40a79c0d478a831b625a92932f6fced5c7c9a81efb6caaba13aa07573a22
SSDEEP

24576:DpiSkfdyAoPlPJlwI8h+F8KWzZo5I2yLCy1spmPNlL4kV:X0yxlDh8wWxNII2yLkpmFlEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8e578257277fb1423a49a1e0572b7f8eeaf5e1312c68209364b4273bc0c3c9f2.exe

Files

3cb9efe410a2ae4089859816ecf563c9.bin
.zip

Password: infected
8e578257277fb1423a49a1e0572b7f8eeaf5e1312c68209364b4273bc0c3c9f2.exe
.exe windows:4 windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 840KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ