3113c2a7b30c1cb350e8950b4222b0c4[.]bin | Triage

Sharing

General

Target

3113c2a7b30c1cb350e8950b4222b0c4.bin
Size

330KB
MD5

aeeaa6ad4e54e200998a38f0392ef436
SHA1

7b018368b4abed2584645d761383979f3a9a5ff9
SHA256

d90491d20558e734d0b11fadebd39a58536fbad4976f7136828ecc14d2fe1c8b
SHA512

828b01c8b907f6643aca3d857569b9b95a8ae2acf0e92d0d92b15524590185abfc427102c5ae506a4a49c84b2ad2da09a317409854153a72b6615131def6f510
SSDEEP

6144:K43FdfKLsfFM/hSXCtMLkaOX2Z5RnLp3J8KGUGgaRkRiUeCLXFBwf:FeK6KPE2ZPlWYFeCLXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/7ff1d7dd5684cd38bea4a227bf49d4ceff1de7d2f66a556ccc6ce1a382640fc6.exe

Files

3113c2a7b30c1cb350e8950b4222b0c4.bin
.zip

Password: infected
7ff1d7dd5684cd38bea4a227bf49d4ceff1de7d2f66a556ccc6ce1a382640fc6.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

C)Ez
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ