dbe947bc12a26ea732b063660841191d[.]bin | Triage

Sharing

General

Target

dbe947bc12a26ea732b063660841191d.bin
Size

31KB
MD5

9dd5c2defbdb2bcaff70dddae213d626
SHA1

26b59ad8e9b9e7b95a8a8115edb0b3bc5c06c374
SHA256

44e74bc7f56e92d63f9bf6e8cda19e69d43e938b1a9fe6efd418faa86ea58a32
SHA512

ab61e1ebd30f9050261ea3b4c4c4eff0827ca5365c3110ee2534f2ad177ae5dfe2d1a0422659c6a19cd1c5f9a2a4e69a839379ad8ef900f8ba6102383b92a322
SSDEEP

768:hH/sKdPm9kHFGxqwCa8pNTKgR5bVxsTvJS1eR3lt:yj9qwCzNTK6paTvJSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/532e333b12fe465dbdd0919d3731d43fe21bda3fae71b89ff10272d2d7d94bdf.exe

Files

dbe947bc12a26ea732b063660841191d.bin
.zip

Password: infected
532e333b12fe465dbdd0919d3731d43fe21bda3fae71b89ff10272d2d7d94bdf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ