40cf5b7e5c505da78a7f66d2950effbf[.]bin | Triage

Sharing

General

Target

40cf5b7e5c505da78a7f66d2950effbf.bin
Size

206KB
MD5

052279dc37a4d4ef840cea98c66b368b
SHA1

67dd3febb7a9b578ec0b0636576d10a9c088748c
SHA256

2036928122f63d2ce88ba94aa48f0e2e42af769d2731118e441b568fb7866182
SHA512

6ee19882aa457c704d590292f3b13bf374053c18d829a0226c99f07cac9822c6c4920345e86f47548c06ebf49d83eb2b001ea3e2dd7c596f32734a84048a0a78
SSDEEP

3072:LLMwCux95Q/ELGbRaikYckCluoiRVX2wb6xf/doLw69r4tllEPZBwj+S/X4gblDN:LE6bQ4Gdhk5TCOxdoLws2llR/XZJgtoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/911221ce521f77139ecfa2a277c277aaee6bff7094d9c5b31b893a4b104dea48.exe

Files

40cf5b7e5c505da78a7f66d2950effbf.bin
.zip

Password: infected
911221ce521f77139ecfa2a277c277aaee6bff7094d9c5b31b893a4b104dea48.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ