ff54c1620292f1c1ce7bec6a34b735a8fa7633c0[.]bin[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff54c1620292f1c1ce7bec6a34b735a8fa7633c0.bin.zip
Size

1009KB
MD5

14934c8dd452bdca272fe12dde673f90
SHA1

de94741ce365bf6883ec45dfe60aac4bc40fb387
SHA256

fe63d0ff2eea88b3613ca84d73cfea2919a45406bc934d1e8754971a2b8d56e8
SHA512

a27385e33efdb1babae0baeefd699cca8ac62409bd4736078d329bf524101fe01893daed647d03f0d7cf86fc74741e3976c5a074e00b91c9617d0a51b0eb19dc
SSDEEP

24576:wy/Z6o+4Lf6/Sw9uzAFj9W2lijCnXiZtlYOXCrQzdUoNw:D/ZA46Swwz52lijC4tlYSPxda

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ff54c1620292f1c1ce7bec6a34b735a8fa7633c0.bin

Files

ff54c1620292f1c1ce7bec6a34b735a8fa7633c0.bin.zip
.zip

Password: infected
ff54c1620292f1c1ce7bec6a34b735a8fa7633c0.bin
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

jYW9Bw0
Size: 762KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ