42b838cf8bdf67400525e128d917f6e0[.]bin | Triage

Sharing

General

Target

42b838cf8bdf67400525e128d917f6e0.bin
Size

86KB
MD5

715915e90065489fe84791a852a698e8
SHA1

9bc515e3f9900662b088d68f823e33b84bf01a5d
SHA256

0f21d6cedbd040cda040e66048ec2ce7e829672d1f37d7010ff1c7a8b1779b40
SHA512

3fe8d1ed5731ea8b2608d8731f48ba127d29ddd8e6c7df9a5953e52f84790161cc6dbe004f3a14ae2c0690b91e3502d508f3977ec6499a3a5a0e6eac1a5c7460
SSDEEP

1536:VQq/wMKcwtI4nWxlxusacX7I/3TwgkAlE8AT5NsUPvPaf79VlcTl65:VZghzaurMELrl4NNsQvPaOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/0e4ffba62ce9a464aa1b7ff9f1e55ace8f51ff1e15102d856f801a81f8b4607d.exe

Files

42b838cf8bdf67400525e128d917f6e0.bin
.zip

Password: infected
0e4ffba62ce9a464aa1b7ff9f1e55ace8f51ff1e15102d856f801a81f8b4607d.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

M:\BACKUP\SOFT\Ledger\Ledger-Live\Ledger-Live\obj\Release\Ledger-Live.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ