396636916356b7860d989fc3b46b2719[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

396636916356b7860d989fc3b46b2719.bin
Size

702KB
MD5

7778c0ab8a0baac3bd0d320e8414c927
SHA1

d4eb9b32050d648da42b8e1fc085b65fc74f5986
SHA256

c39c21365107ebadb4ef44a9a9eb2885db0de3920eb6cfb21eb3b2f368d20cb4
SHA512

8339a4b6acc5acec3e985f83ad5e5b817dafa0795023aeab2e9396573cac25afbe0d5c634fee87b7f4cc5f353cd97174923d4b0a65da2aae244278b35042f591
SSDEEP

12288:TKrlv+GFP1Ch2Ok9JyN1zoDs+rqxIfXOiYmavHxggHh1ifMEFQWC8thtcWeeqvyk:TSl2WCQOky1MZr0IXJa//B1iRFQ6xar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5712d6afcbf5c83892bf3f622e946b7461ad04f3663ef44a29fab1ab3ce67730.exe

Files

396636916356b7860d989fc3b46b2719.bin
.zip

Password: infected
5712d6afcbf5c83892bf3f622e946b7461ad04f3663ef44a29fab1ab3ce67730.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 817KB - Virtual size: 817KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ