5a12438b3b4c926c12a9376c7bf13426[.]bin | Triage

Sharing

General

Target

5a12438b3b4c926c12a9376c7bf13426.bin
Size

773KB
MD5

a16eb7878d4202cdbc3779ecda900e26
SHA1

8e9aff7e1f2d9bb801c1eb22dff826463cbc7939
SHA256

a8ce6b79a070f801bdd651b0f65828841dc6f0f35e81f84415e635f9b4cb7e9d
SHA512

f6948ef73f887d846dae2a8c5ff4bbcff8ba74c7078c5b9f21f1a402ba5a4b58eb4cedd65720a596217157c883883896d2b92022668fd1016a797dc0bffc36d0
SSDEEP

24576:wpvDxHkXxVhpbCfKn/tT5VrEBwt2WvBygmynfGdoInmrw:qExVhpmfK/tfrERWQgfGm2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/1a794211deaa0ecb6abc6101d7c1bd61111b4dd2d895ee7ecf78fbf17f4c9ab3.exe

Files

5a12438b3b4c926c12a9376c7bf13426.bin
.zip

Password: infected
1a794211deaa0ecb6abc6101d7c1bd61111b4dd2d895ee7ecf78fbf17f4c9ab3.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ