c4cb7655cafcc20ca7c0a513293605ad[.]bin | Triage

Sharing

General

Target

c4cb7655cafcc20ca7c0a513293605ad.bin
Size

179KB
MD5

03544fb4a071b732bf40b4e06833d462
SHA1

55bc301134a323df2cf888073c4cfe5c04971f7f
SHA256

e6622bdd555368ef8bf22a55947f42d1de681e5c550f54855562083360eff601
SHA512

7163269bedd4d8e976d7d7d97e5a262a745ab0ecc48a4923d87273c7b96ceb93458117092c020455baa08d778715e2eaf833e3187a2396aa2af5eec808b517b0
SSDEEP

3072:vAzPrtxWmGzt7uGTR+ooAhO8S7R3yHmD6VC4OhDwrO8SZLi4wlMZNg:ozrwz1jRt4938m4frXYLi45Ng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/340e702e49081960c6d318774ab212ae3885ab93fe5ad5d26cdf3c64189a7abd.exe

Files

c4cb7655cafcc20ca7c0a513293605ad.bin
.zip

Password: infected
340e702e49081960c6d318774ab212ae3885ab93fe5ad5d26cdf3c64189a7abd.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\BHHh877.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ