18ff1162fef9d599bbcff7f4bc4a21e7[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18ff1162fef9d599bbcff7f4bc4a21e7.bin
Size

584KB
MD5

c7e1bab8eed805a9a2ba1dc48d555831
SHA1

8a11eb5ee06c14ac56b69a50b101ac9274ca4217
SHA256

b51435a980c4ee178df47a0fda0c28e939055c74a08acb3420def268f0c85dc6
SHA512

35560fd19177590ec8c836e2f4cfb0cc4d44c230e91a64bbe61ecf97328963afa580a60f23f1ced2d67798d8b4602878e235d8449191dbea13aca28551371695
SSDEEP

12288:XtjxR0tW5evjudyzzeOfZI2PHB06yeXMp2Qty8Nqr2Vzvz4WlCzu6Rr:djb0IevSdyzSOHBHXMpxdFt4IOu6Rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b960e59e160d3b049843908bcfb05c00326a252a574de70d2126ddaa8f48a962.exe

Files

18ff1162fef9d599bbcff7f4bc4a21e7.bin
.zip

Password: infected
b960e59e160d3b049843908bcfb05c00326a252a574de70d2126ddaa8f48a962.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 756KB - Virtual size: 755KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ