f388e9f5421968043b219eb564004363[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f388e9f5421968043b219eb564004363.bin
Size

37KB
MD5

8cffa7c43e32d74319973f8550f82dc5
SHA1

1084c2cf9bab6c6f0917eba07d2ee6112312a688
SHA256

41afec9ab63395978dd725fc2af40b73eca7f196088a790c25144c190e845f07
SHA512

a275f3a7ef9b2a5a7be803074f8966091603262ea6de3a9112667bb23a7af581f6657711fa94fb3fdbba2a6901ae67cc54add034f65c48d4a875c61a727aac59
SSDEEP

768:P+6QI52IRTrpeiHlNcwooGB6TjUjnekQWHCK3J1XHHY89Mo6CK0:26REI5JHcwoo7TuH1HR1wo6I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/22c9289584b472d01af24595a95083cc71d9fc1d273914d4c367e74add1c36e8.exe

Files

f388e9f5421968043b219eb564004363.bin
.zip

Password: infected
22c9289584b472d01af24595a95083cc71d9fc1d273914d4c367e74add1c36e8.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ