0c7ab53caf16e730fdfbd12741e3b201[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c7ab53caf16e730fdfbd12741e3b201.bin
Size

1020KB
MD5

80aeef883ad8e1a258d1dd85cb3e47d9
SHA1

74bbb1968ba933f0df6e60b0c27b94c355cd3d3c
SHA256

44ed130fe7518e79d02549a7ae0d97c85cb7c65aab892bf6f0cd0386dd513a5d
SHA512

c90253f9013f28aff0cde6def5eba3d05079bfae2bdff32750c904fb304cd33fee44c5bb7be1eb93680b79a790d82d752a905c5ea210b6cd30675f60a14204a1
SSDEEP

24576:et1UAs+6BooDB18vfSi1DnZtxzS7lpHxq:es0OPfi1Dn3xzShpU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b9f2bfc2bcf4ef29b0b1de88b2bc0cccb3f7997d3f651f3ea93bb6ea993822b4.exe

Files

0c7ab53caf16e730fdfbd12741e3b201.bin
.zip

Password: infected
b9f2bfc2bcf4ef29b0b1de88b2bc0cccb3f7997d3f651f3ea93bb6ea993822b4.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

jYW9Bw0
Size: 762KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ