074c446fe20fa88fa6bb5b77f931a1a7[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

074c446fe20fa88fa6bb5b77f931a1a7.bin
Size

606KB
MD5

6a3a0a4a68e5b06a16897897c57d5b42
SHA1

11642aca29faa03721102288ba00c532e2577f14
SHA256

baee17bd4d763539ebad9c6f0d4272eea3cdbc49b712309ed11757678301b254
SHA512

6d9e63f5d4d10535800dadd384ea5206b84ca39611d924eed0a2a5f68caf81ae9052f7c1aea833750fb630a79b599250b81321f6f308849aae6cb5ca938a2f97
SSDEEP

12288:BHZ7idN5u4XX4P+lZkV+b4NNV+H0g1kxucZ3TrfrUHxDfaCrn7Q8yzpD/PUidLNz:Bq5pH4G4+bK9nuWIHcsXyzpDHUCLYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/30edfb9a936a7c0be6e8a97732bab72ec1bcc2d4bba4d8bef301ae944c8de7c2.exe

Files

074c446fe20fa88fa6bb5b77f931a1a7.bin
.zip

Password: infected
30edfb9a936a7c0be6e8a97732bab72ec1bcc2d4bba4d8bef301ae944c8de7c2.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ