30c4d035df73d088c686fab5a627ccaf[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c4d035df73d088c686fab5a627ccaf.bin
Size

327KB
MD5

8d740e16986473c3986807a55e24b44d
SHA1

be8435ae922f1e3bfd0893b43a6b094307b6e890
SHA256

b980dab578b57b876c0b875fa2865efbc2962ee82a67e6b92b21824c055f158c
SHA512

2e67a6b0c511d2e721fc29e23ca8436a6fc7a19c53342437f0779852eb52fe48679416260867fb8079e3439b747edbb86c4cc52cbc12db32221687218121996f
SSDEEP

6144:hJUg3/E2Cx3j3tLDonXpL4j5fCK6gkXrdxvAqBnrj9T0jljrN1+R1YPBEk+e:YyPChj9LDoZ4f6sqBnrZTi5NCe+e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/480d05a62f1102d9d224ab5cc56d3db1305d4b3065660a255a949421d6f4748e.exe

Files

30c4d035df73d088c686fab5a627ccaf.bin
.zip

Password: infected
480d05a62f1102d9d224ab5cc56d3db1305d4b3065660a255a949421d6f4748e.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.APX0
Size: - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.APX1
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ