3dd58f75ad16b66a3c034bae89038393[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd58f75ad16b66a3c034bae89038393.bin
Size

985KB
MD5

fd772b76d1a15c9ee5c46bbd8bf73c63
SHA1

26dabfa3670cb2e02b9eccb36d638520dda5e09d
SHA256

5e0f8c3b50fb091c68e08ec40b22867ee1197513a7e59aa613a5df7afc431a3c
SHA512

52bdf811b97191ded6a67892d2889286d4331bac2c2c8156275b2b327b69d2a028ad06e3c7f65d9d1c5d850744c950b66c9fb017257d84fbec884e8016a227c9
SSDEEP

24576:lICy5WjkW+/H5Qpy+vZAndJekeIM02RT/tVnSSu5/mf5RT:O0jwLdJek9M9hnSv5E51

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7d0094638be40437e64bb472a23d920cde1751b266427028175929b3507bacf5.exe

Files

3dd58f75ad16b66a3c034bae89038393.bin
.zip

Password: infected
7d0094638be40437e64bb472a23d920cde1751b266427028175929b3507bacf5.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ