3a0dc38c08345f32eb6a71f4a18d5728[.]bin | Triage

Sharing

General

Target

3a0dc38c08345f32eb6a71f4a18d5728.bin
Size

616KB
MD5

c4c52029f904715a507159b1eb3ab10b
SHA1

471329e50e5e5b8fa563a01f90b62a42003a478a
SHA256

a1dd4b4d9470bfd1d2140d0d684103863ecee9e00d78ba0cc265857d4502a54b
SHA512

ba1c5230d5fb8464951df857b6277f437b43c8e9a8050568e1a7e07123a8c95040dc75a593b44693ad4b065ac62a7d2a5d831ed46364186eb9d1183fb55a7202
SSDEEP

12288:ius67cmLOODrUK2nD0r0xE2zZ6bGrG9gYOO0uoMhXJlkhmmvle3Oc8l2+bV+BmTU:VomLOmrUrM6EmsbGrG9g7Vuz1mte3Ocj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dcfd5b0c16f4b58c12f71af5f546b06fbdf597b7a82d6c14b9799588551a5a9a.exe

Files

3a0dc38c08345f32eb6a71f4a18d5728.bin
.zip

Password: infected
dcfd5b0c16f4b58c12f71af5f546b06fbdf597b7a82d6c14b9799588551a5a9a.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ