bcdfe1731245b9594dbeed5cb5b20a8a[.]bin | Triage

Sharing

General

Target

bcdfe1731245b9594dbeed5cb5b20a8a.bin
Size

21KB
MD5

b96e7f538947072ebf7fb60d62774c0d
SHA1

b252332737a54b366cb2a4250244816d38e899d6
SHA256

68b33a5c9fabaa7262ac8bcf9aed12adbcae6623aec41acb4e588ab2f9b33189
SHA512

7076d28c84c13bf26e2d41567b8308f911022fb56d0aa33a33c5ec0297a57f3e2bc13e215860032c29af55e57eaa9c5e048f8a66e66c03af7af5a422452f66eb
SSDEEP

384:ojX8cx1aXb6ClKdnbXNyQpB7RCPM+YQ3VHEPXkJWxysg2RtOP4edeW1qUasOPJBo:ob84UXXlKFgSB77E3VoXkJWxyTOOPrdp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/60e8b003440b080a51356349e2fd177d7b6c9d9661b22540462d0d01598f4a49.exe

Files

bcdfe1731245b9594dbeed5cb5b20a8a.bin
.zip

Password: infected
60e8b003440b080a51356349e2fd177d7b6c9d9661b22540462d0d01598f4a49.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\SiNoEstas\obj\Debug\SiNoEstas.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ