4f916a3a68617d5f8d3a36855467f058[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f916a3a68617d5f8d3a36855467f058.bin
Size

579KB
MD5

24721358a046b0bf9fedef3ba177e73a
SHA1

d9517092b36f282a55fd64946f6800efa3b74490
SHA256

2ee563dc61061e562c3d7fc2625f5517a47faa3af78c41aa82c1ba0cb0c31626
SHA512

e5a097e4164ab94f59bae8423f14575268741a635db29b10062c06b32398f530e7b37838d668df445c20d6bf16a900fb169bbe81a9afe3af7ef056ef032ae26f
SSDEEP

12288:1GZ7A265iWXH2TyVUffpvr/STuWOA6W0vZBYtTtjCm3DNvxBF:0d70JVkdr9A6W0vZBYtTtCmh7F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c72275196919f799f14c58c35c70bf775f32eb85028c77791b1138c8e081e692.exe

Files

4f916a3a68617d5f8d3a36855467f058.bin
.zip

Password: infected
c72275196919f799f14c58c35c70bf775f32eb85028c77791b1138c8e081e692.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 597KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ