afc4c3b10fcace7719330384a3be79a7[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afc4c3b10fcace7719330384a3be79a7.bin
Size

10.0MB
MD5

8e1734ca711f3da69d60c7d29fad97a7
SHA1

2e5b3683b2d98fdbb31854d7e99f5fc74128a8cf
SHA256

9c4987f6381decaa61caafd5593af6b061cdd79cd0f7e4c2cd5c4513129a32ef
SHA512

d9a11ee000ac887d5a9e43f9e270a1bfb8ddec5aeedf0d9c61dc12e1fda81f99b11ee6ffc7866dd49958bc196a8db705546a455a156c24473d3a501b6f54634d
SSDEEP

196608:IhzkqGrpQcUZVzWfT5Y8MiLauWJNnDaVv4oNmcOAGQQTl:INmrpjUA5YtiLauWNnDaLNbON1l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/800cd06e420db368d76de6067d887fb0a801ed31b787efbfde248ff28168eb54.exe

Files

afc4c3b10fcace7719330384a3be79a7.bin
.zip

Password: infected
800cd06e420db368d76de6067d887fb0a801ed31b787efbfde248ff28168eb54.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ