1[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1.bin
Size

464KB
MD5

c9201073c3b62ea51c5055b9e7ab5ec0
SHA1

fb3d7913f9f63088b9e5654dc13d1c72db8df413
SHA256

0b1a989c78c674dbfebd30ee956c1792469a5399506932d8e05e8cecb53d42b1
SHA512

626dd3defcebef15d73d69cbb887489568d4ab4bd4770b37fe0e9dfec4c211aa2d5588937831439313fe4009f3eea28d800de9fea33d3183534a232ff2958e62
SSDEEP

6144:/QzDLHV2X/L/gUydoRHlfxCeWgq02VkKQJbiyZsLbFualKk1L:6DLHUX/LY5doR5xKmbrebFL3L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1.bin

Files

1.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\e\1111\PHAN MEM CAN XE MASAN - hau giang\PHAN MEM CAN XE\obj\x86\Debug\PHAN MEM CAN XE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ