9df2be3860081eb963d028592fb998f6[.]bin | Triage

Sharing

General

Target

9df2be3860081eb963d028592fb998f6.bin
Size

353KB
MD5

c4aaac20284b2fd9ae46d1e119ba5c97
SHA1

92000579da43719417564f79e871cc87871d1271
SHA256

bfac17bf9afcd4c29cf1ec35afea82c57aaa0507528b61dd1ee0e2e272512e19
SHA512

6a49d93513a207596fa3462f19f3e99f56265228c971c08b5690daca41715806ec64c95de4f5d869cab4031663f29699bda2ad6548e1ea185d66fdb00068b32d
SSDEEP

6144:EALhXQHSLPA5GsJLBWborp0wwj+Mg1sKzzD3xFuSkxSCVTEMYK3vjoJPq8cAey7f:OEAzJ4wOwwqMkX33LkTuKLoxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/0ea66c4bb51415da1cd18fb935dbf3f5e8cf671310b9fa9a1f847fdcb6cc46b1.exe

Files

9df2be3860081eb963d028592fb998f6.bin
.zip

Password: infected
0ea66c4bb51415da1cd18fb935dbf3f5e8cf671310b9fa9a1f847fdcb6cc46b1.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ