fd919aa5b7aea5c2a5c35f10fd20f513[.]bin | Triage

Sharing

General

Target

fd919aa5b7aea5c2a5c35f10fd20f513.bin
Size

621KB
MD5

490299d3c3b82f517c18eeb70392c54e
SHA1

7dfbe30654d045fa58fa2b836ec2b8235a5557dd
SHA256

f40e56d41ebf551bd09359203d1db3c1e8b04a935a0846c163472f2f5ca095ab
SHA512

880e83ea89e2321a0780d27f6e25a26f4e895271d8448203a97e302c21411a50d17e804a028036d4d07d4b77e9a483b32503cdcd70c919cc281190cfe46d339a
SSDEEP

12288:XNKNuXWEYU3EehHV3Ksr6p3teBrUOqlSWB1JRL4WYT28I70ugJGT:XNzXdtzasep34BqlSWB1vXK28I70ugJy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f3c4c44285b5439a4c608e38beb95ada32d34f68b83ed9795649185754d9d5bd.exe

Files

fd919aa5b7aea5c2a5c35f10fd20f513.bin
.zip

Password: infected
f3c4c44285b5439a4c608e38beb95ada32d34f68b83ed9795649185754d9d5bd.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 630KB - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ