a239211f31bbaaeb73d1a985c4cd163c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a239211f31bbaaeb73d1a985c4cd163c.bin
Size

8KB
MD5

64df23e31603d5e2684a07fec050ec4f
SHA1

5ea6f06ef932c807fe6af0875518a89e888b0b86
SHA256

7afb42513a2acb3e10ef2d57ba6c67b3ff47973eb8bea65cd9b934bc469d8387
SHA512

8083d457ae2c18f5c8547679cc34ebbbb86a5738e840c88178573ccbaf5ec51f103d6ee73057524b38c9e8b5dd6bed0a563f40b7d7d2ab2059e6f409be70e240
SSDEEP

192:FT4kYOf+fkoGfb1Ay//IM07W/HDZWlOOHIg+Zh6NA3LPtrNlDRl:hY0IGfbKy4ZkHlWlvvmLP/vl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fb69f5ebe4f15a83ca58b67b751e898d572b07dd0550d2f909f08024490f8b6f.dll

Files

a239211f31bbaaeb73d1a985c4cd163c.bin
.zip

Password: infected
fb69f5ebe4f15a83ca58b67b751e898d572b07dd0550d2f909f08024490f8b6f.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Windiws-labs-c#\Downloads\mariogame RUNPE IN VB.NET\mariogame RUNPE IN VB.NET\mariogame\obj\Debug\mariogame.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ