29ac96a9fe1ac6ef602c6deeda8670f4[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29ac96a9fe1ac6ef602c6deeda8670f4.bin
Size

2KB
MD5

7c0bca6af92e0f8ff8c24f4fdd8fe8bd
SHA1

1d3674493354e5213e1af78b6ad57ed790574088
SHA256

4bad8e3d9d77f9907620a4f2dd6ed52886eebe587c3c3c4f89088f1642c0627a
SHA512

9fc806d69ec17b5de615fcc83008cd91832b8bb5cc15ff0f6f01f5d5fe399edd563926a272ced35665be6144e857f91e73b58a71aa84a5ea724bf96ba9aff5c7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c2543e2a68b58d2b9fd94e355235c097e83fb508543b52ecd0b1ce91af30b182.exe

Files

29ac96a9fe1ac6ef602c6deeda8670f4.bin
.zip

Password: infected
c2543e2a68b58d2b9fd94e355235c097e83fb508543b52ecd0b1ce91af30b182.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ