2f9e1385a9c419ad70bb121e4250ae0a[.]bin | Triage

Sharing

General

Target

2f9e1385a9c419ad70bb121e4250ae0a.bin
Size

556KB
MD5

608037abcea8e1b38569485c03ca9342
SHA1

78f4d938ab860a9e7ab3b1c878fda764b2b376fe
SHA256

171f5e5c6af8da5f27dd317092e46e7f818eb17539b346e383a9d0576b336b71
SHA512

f79139495a345f1be22d4c877f68fec669db9a512f3e9dc0533e7a23fb4a436bec439c7290ce4f35d501625b743762379f79840304b947d1d6242f6fad5069dd
SSDEEP

12288:5wkY+NHoJ5vi8G9GWmYtNAarAyXf6lq0elYG5LZgE/u84fnbsLE:lvNHU5K8IrXtF6l6YG5tgdbsLE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/9a565700a3d3c7a802780c0e4ba717b082175fd33b5afc7dcfeb95905b6db784.exe

Files

2f9e1385a9c419ad70bb121e4250ae0a.bin
.zip

Password: infected
9a565700a3d3c7a802780c0e4ba717b082175fd33b5afc7dcfeb95905b6db784.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ApVX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ