3f1ee11454f4ca142dce6dc6f05fbd3b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f1ee11454f4ca142dce6dc6f05fbd3b.bin
Size

34.1MB
MD5

0f4dc99386fba95bbd04ae7a17a629f8
SHA1

df3a90f892f75c0ba6346940fa243d0dfbb46abd
SHA256

b9822d84a679cf4adfc497b78e278c2ddcab04e52c1c98121cd541d7ea3d8dc5
SHA512

d35375e1048b2ac69895115a09d6ca3ef7e5b91467aac2cc1e73332f0c32b1a62dbc3c04480b47afdcf0bd61fcb1167c004ae307193a427398a22573efb92943
SSDEEP

786432:i3+GYNo7Twpr+wGLj+YQ9E/bLy1hBIkOfyoyDkyWpSh1OQA:i3+twsr+w5tuLy/BeuDvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/975c69e841169712fe977aeed7f0479c783675e550fab46e7d5ad303eea5d0a9.dll

Files

3f1ee11454f4ca142dce6dc6f05fbd3b.bin
.zip

Password: infected
975c69e841169712fe977aeed7f0479c783675e550fab46e7d5ad303eea5d0a9.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45.0MB - Virtual size: 45.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ