4498a75f6f27e3e03a0b14ba933c0a06[.]bin | Triage

Sharing

General

Target

4498a75f6f27e3e03a0b14ba933c0a06.bin
Size

418KB
MD5

2588f2a8d48512eccc13acddbba932a0
SHA1

ec985491b618e1398456c64fa06873e58d9a935b
SHA256

c06a5403e056fc7ade2a51d93dce194268b65155f8a1202692302f4bca00539b
SHA512

fa935e23df4ba175eee73651352ff94463965dd671fea76ecfb07bdf9607744098fc766f42b333ac3df789036800394ce8b22b5b3649e09ed4473eb639057742
SSDEEP

12288:Zm429ItdD6bGczOezfw6x7Kbb5+SHcJBryWSCSkfds1:ZloIbD6lfK/5+3yWSCSEs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/270da7ba03177d793879ddc0272e94a0003e9327298879463693f7b78f199e28.exe

Files

4498a75f6f27e3e03a0b14ba933c0a06.bin
.zip

Password: infected
270da7ba03177d793879ddc0272e94a0003e9327298879463693f7b78f199e28.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 789KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ