b47cf4de4046cb965a201c07adfcaf70[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b47cf4de4046cb965a201c07adfcaf70.bin
Size

2.2MB
MD5

d4e9fdfefb8efa90a8800c2d3cf9a5a6
SHA1

d849796628b9e085cd8e786fb364190e66f3619d
SHA256

02efdab274c5b86756b50b82d83555ca60fb5ec7cf65db73961db79636b10a09
SHA512

20cace10e75963f57365411d4602d25c05295d19f13d862e58a0549d1adb20650016247dc588e6fb0e9d50f17a36ec2d90fbaa59adf54cc731f9de79eea419f7
SSDEEP

49152:muFMk1B/jBb9JTJ7/3g9iglHciw9Wr4UwrHX0BO1boucJFR:rF91BFb17/+iglHc79Wr4hX5bsJn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b7a9bbff175e2d9cc3968da54e3d8d02ddfcf8f80f6d88da9901db5ba04f15f7.exe

Files

b47cf4de4046cb965a201c07adfcaf70.bin
.zip

Password: infected
b7a9bbff175e2d9cc3968da54e3d8d02ddfcf8f80f6d88da9901db5ba04f15f7.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\DeveloperSys\Documents\Embarcadero\Studio\Projects\DLL New Completa\Projeto C++\HotelManagement-master\HotelManagement\obj\Release\Discovery_World.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ