c9337642176bdd5acec748a8f5d5c918[.]bin | Triage

Sharing

General

Target

c9337642176bdd5acec748a8f5d5c918.bin
Size

626KB
MD5

4c82cccc325cfdd26b4f08d3e3b05300
SHA1

99bd97ee849848f6d45907609fb2f37b8f34a2f8
SHA256

5e825a824f09aac98b56d642c123788797e91ed5f97dba050a10da96cc085753
SHA512

63fa02db258bc1e02dd864a8dd2aff736e7d338ac6f0a774ba47cc3dc1b5ae2f13f76d30c303075c43c8917d5668849ab4b1377eb153a988bea03911b1472e27
SSDEEP

12288:RsjiqUSc9AtJPUIamrL+NkVN0wIrONCAW7GH9bCtnV4Nq1g0HquXW:qWqUL9At1UNmrL6uNjnrH9eZSNq1LKum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/242ea95cfe48aaa9fca35f358ac8431cd1bd730b1ff95543a4f9d9e768115d3f.exe

Files

c9337642176bdd5acec748a8f5d5c918.bin
.zip

Password: infected
242ea95cfe48aaa9fca35f358ac8431cd1bd730b1ff95543a4f9d9e768115d3f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

abai.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ