979d0840f1018723a0c2f1b38e053a87[.]bin | Triage

Sharing

General

Target

979d0840f1018723a0c2f1b38e053a87.bin
Size

304KB
MD5

9f1fca1a7f0bfb3adfde8ac52b781309
SHA1

1545c17e466d1e48e7875a0e52fed90cc5848e5f
SHA256

636e96ebe3d993c770c9c10869720b992fad0be29564801cd020844235245cb6
SHA512

1e8d84afe11744cdd467a791a1e9cbfff6dde6f8a8eac774355db6c16632488344aa79544ac18cded2e0be3b6bd34efff03d3818c8893ac7bdf3d245475a64f3
SSDEEP

6144:UMszNfm1iJZq4aaJMktHnkcws6Ymw/lS8tMlo//SVo9gn9JsMRd5h2/u:UPNfm8J9aaRRnkcws6jwdS8tMCiu29CW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/17ad92c5d4b0707380de23f0dc97a7d50319d3f332be6a6d9cf30d239d49f744.exe

Files

979d0840f1018723a0c2f1b38e053a87.bin
.zip

Password: infected
17ad92c5d4b0707380de23f0dc97a7d50319d3f332be6a6d9cf30d239d49f744.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ