9c9908d9a8db6ad301678e96d136ddd9[.]bin | Triage

Sharing

General

Target

9c9908d9a8db6ad301678e96d136ddd9.bin
Size

534KB
MD5

68fcd1a1d92b63d8e1700c86cf01d76d
SHA1

73ce829ebcbfc9266a1d5eeb86979acf6be72229
SHA256

0d344a135444176f953758de2fb959c50b1490704b9eb1fd7da7d5d9b8b63235
SHA512

b107901a2a6d52ab88ec53b7eba4b0167013f41cbcb03a946b657b175e2d28fa1d53453c73b7630ceab4cd4ad4c73cbd69921c19b3345cc586689e6bd1861b23
SSDEEP

12288:7f12j1Wv9u2sz9n5UtBMr5AqUpecSJA+du:gQFu2S9e4YpecSS+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/cf6aced16f19b2a2a0ac5266565f3b794e42e405fc570b5df344daa3c3d1d5bb.exe

Files

9c9908d9a8db6ad301678e96d136ddd9.bin
.zip

Password: infected
cf6aced16f19b2a2a0ac5266565f3b794e42e405fc570b5df344daa3c3d1d5bb.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 965KB - Virtual size: 965KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ