2cad41cab15cab31e2f248c779d414ce[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cad41cab15cab31e2f248c779d414ce.bin
Size

48KB
MD5

2700d5b53786d368a251d728a85bf5ed
SHA1

3f1679407e7d11615d664fa6cde98c369913a10e
SHA256

502568bd9d138c951e28f8c88c18f8cb394a263ce642cfae26099c709f325ad9
SHA512

f0eb742d88ddbac7421f0bf6729743feaf3f6e3a7438e2b396ee91203b164a4aa7241254936a0b411dda4feb4a86d138d2211fb0961ad0b83aa66708b8f3633e
SSDEEP

768:cGDlVyQiBCjyUyy2iGSWT8nE0rc2VgYAe1zmoDdcdu4K6BzdF8y/A:cGBBiBC+Uei2T8nEl2Vg+So4bYy/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b953ef3b1dd6e08d2179ae23624e0051c15754656d97fb8ca2461416360b05bf.exe

Files

2cad41cab15cab31e2f248c779d414ce.bin
.zip

Password: infected
b953ef3b1dd6e08d2179ae23624e0051c15754656d97fb8ca2461416360b05bf.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ