a31afb50a1464eb8ecf68411679c2f96[.]bin | Triage

Sharing

General

Target

a31afb50a1464eb8ecf68411679c2f96.bin
Size

673KB
MD5

3cdc79c3294be1074e5bc9e85308ff05
SHA1

ed0b6ba4fae1e6f4e1f4ce6a5764d9efc8628f39
SHA256

1f3fd47d1fa9c8c3d3ff106e0622c13592d72fa3de8151a913d104dd4f8bf343
SHA512

8b669a2d1d30b73959fc6624cb5b4dac70e6319c3fb395d519cfb0c27fdbdd13f356907431ce10d5f03026ff3139a65ed0e9c695aa6b7282b4d5d42f46992c6b
SSDEEP

12288:IPMxNSmCu/GnoXkPVIndn+8R80U6eQL5qS3dwiqItGFn9J/mvcjphZH5AQb:IUxN7enoXkPVQ1Rq6lVqSGCAGEjpHHjb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/a325a9a1c6a1c0d8df497b180021ae7a5860103f8ed859956679a5a0f608afae.exe

Files

a31afb50a1464eb8ecf68411679c2f96.bin
.zip

Password: infected
a325a9a1c6a1c0d8df497b180021ae7a5860103f8ed859956679a5a0f608afae.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

eXhf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ