50c2d334c691b43163a048c0117f5d87[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50c2d334c691b43163a048c0117f5d87.bin
Size

658KB
MD5

e4fedef8e0fe99069234bec0846077e6
SHA1

5f98d5830d991e054d4fa0e1693a580d58bbad29
SHA256

1ae1073bc5495cc195b1e10aa9aac4daa2a5186b80db9031ae9ae9794a4ca25b
SHA512

2b3d5b15d9fd73ff4909d0ebc6a767a9422e47c3201221a2f5853ca88a6a7c04c6384dc736f40368e1dd7b540421e0493603fa910ffbf72745f1e3eed79e7875
SSDEEP

12288:CEieJU7GqbkBfj9NxEwktQzAF/tY+AxK1YJYw4KQZmIuhoS5OrPuMroYo7jE:KmybkHXEwMq6/eVU0YwnMmISHIzuZLU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7e714a80d7aa37f095574ad215cea691c865fc3314bae6489346974f6c4cbefd.exe

Files

50c2d334c691b43163a048c0117f5d87.bin
.zip

Password: infected
7e714a80d7aa37f095574ad215cea691c865fc3314bae6489346974f6c4cbefd.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 677KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ