980d784f44ad9d5fa2447a6201119369[.]bin | Triage

Sharing

General

Target

980d784f44ad9d5fa2447a6201119369.bin
Size

7KB
MD5

3f8db0954d690d2bda406c8d37cca54f
SHA1

8c9f938fe6ed5b1e72886e06f37c98f1238946e5
SHA256

23fef5db86b5a08a0c71c39cf02b64dc4622e40a407b38217f51c6aca3374e10
SHA512

7f530d5d2a86983c54a14d09faa550fe64bbf1991c05f0a353c173c99fdfefc4be64745c4639f0fd4f0499061db79177e3a96f85bfb1cbec85ea9176754d2d38
SSDEEP

192:4lRancdVmEHZTRe7KnFy6Hf627GyRm1y5b/vlw+TJk:8wnczHhFp6OGyOgFS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1fe878d7b30a638fa87d9c23df64d562ef5b2421541adcf58b4096d9a79ba080.dll

Files

980d784f44ad9d5fa2447a6201119369.bin
.zip

Password: infected
1fe878d7b30a638fa87d9c23df64d562ef5b2421541adcf58b4096d9a79ba080.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ