7cbb7fb6dff312510b5ca694c3fabf3e[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cbb7fb6dff312510b5ca694c3fabf3e.bin
Size

145KB
MD5

d66570382a0274359c00a66cf581339d
SHA1

741417a3cb170f09b5311dfbf51812605c5b532d
SHA256

8ddf298dbe0a4b974a92edd50a6d7aafcf6d6158f508bf2c54d47e73e0119e39
SHA512

9cb5cc6755111e147c300a05019f7e10b986169d325918bd6a64ac73843e071761b6cb20d21b7336af4d8833d56ffcbdd602299508ee31cf173a251916daec0c
SSDEEP

3072:DirTRVKyymmo5FnbRlwpismb8mj/lSHoQNDUVlAmpLx+1d:OLKyxmabwQdd/4ICqlAmBx+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2eb36af1f00188e6b1060d1e4de529eb9c8169e37b5817e40bb3208674a1122d.dll

Files

7cbb7fb6dff312510b5ca694c3fabf3e.bin
.zip

Password: infected
2eb36af1f00188e6b1060d1e4de529eb9c8169e37b5817e40bb3208674a1122d.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\WINDOWS-LABS\source\repos\mathdematics\mathdematics\obj\Debug\hatthgola.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gN~
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.(Yr
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ