cc491e806d2908ac5c65d7ac5fdf1afc[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc491e806d2908ac5c65d7ac5fdf1afc.bin
Size

379KB
MD5

0481d595fa708d6806cc4f1bb8281c5f
SHA1

c54d3fc2bf17e7da1f7b6ffa1a30476a5cae9c22
SHA256

f43ff5ff17768f5f14001533b0a582bdbcac05ff79a6def0f3e69e055649b042
SHA512

5c91df2dce2a36156f236d9be870f4aefde5d7c708e4eccc9ad58bd154deb2971e705c38a5190e7b8a26a82fc369650e7298266a840fcd3f9f15a866c984f07e
SSDEEP

6144:h2nXqzxvlixq5kTLPsX4kpu7rvuW6e8SGKhkqrVRlJXg1XkYFpV3QdEYp:h2nXalskc2W6zS/PPgVa2Yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d805b874ab77c6272e89f57f5b6f080b039f42064a85778a7ff4bf436575cf68.exe

Files

cc491e806d2908ac5c65d7ac5fdf1afc.bin
.zip

Password: infected
d805b874ab77c6272e89f57f5b6f080b039f42064a85778a7ff4bf436575cf68.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 523KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ