1530c857fe5d228b4836a177a7fbb92f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1530c857fe5d228b4836a177a7fbb92f.bin
Size

735KB
MD5

6a82d2f1a507ce87253bac66c413cb07
SHA1

cce1f7d23c6ca836c449cfd85819a0ab8547342f
SHA256

ff8982fcf59767aa840a9b1c45b9c7921a45a6d58e50f1e992a22e9d72ec1b6f
SHA512

0bd7126d2b6bdd36f21ef8ee27e7df1d46f4ab4606daa288d71a2fb9ae408a9e935489f8b9cab45ff8bd096d99775c5f58f38c1f7827091511a12798da71ff7e
SSDEEP

12288:5oHPesjZRlSv+g7VPHUmIa350Vo+JkXzY8jf9p+dcpsItKsZaiHcrRhB8eSkeQF1:5oHPesjZR0v3V5V3CKvsfOpj8s7c1hB9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a48bdc85f4da302d6c3bd23a5edb8b56a64ffe9e0f79b6e150c11982295b277e.exe

Files

1530c857fe5d228b4836a177a7fbb92f.bin
.zip

Password: infected
a48bdc85f4da302d6c3bd23a5edb8b56a64ffe9e0f79b6e150c11982295b277e.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 935KB - Virtual size: 935KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ