0dd50712d56dae53358b0a641135993c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd50712d56dae53358b0a641135993c.bin
Size

742KB
MD5

efe10cc82940f854119a7af7a39a83c2
SHA1

5b4a6366af22a19dc501291c8e181303b877369f
SHA256

17d1bd38451c42d724e4c61a0692155abc84198efdf2dce6a47c8f6a1fe723d3
SHA512

7ee01f428ad1ad85070caab8f94d9c16a3c161de6cc92864ace22e8bf274871299b6810b0d014d0f530b7376b2a43b7625f80b7210a3b00ef008d1cb564fe2c8
SSDEEP

12288:PqqwUaIQJSgmhsXtr794ayAaha7vr2cYOg9mEKpgcJU9sfsmcsF36PXE:Za1Sk2ayGf2c3UxhcBhccqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c8f53d5dc3e86d0e44517f43f3b792419eb51133d6c91cc03eca52d3f905890c.exe

Files

0dd50712d56dae53358b0a641135993c.bin
.zip

Password: infected
c8f53d5dc3e86d0e44517f43f3b792419eb51133d6c91cc03eca52d3f905890c.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XDGk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 996KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ