100db370d21c6125afd6d3358d100860[.]bin | Triage

Sharing

General

Target

100db370d21c6125afd6d3358d100860.bin
Size

312KB
MD5

992c2839fd14e0648317aab613b52983
SHA1

9bb8497bf6731c4762584e708bd7d12a089d28a5
SHA256

f2e86040af8be9ce037f5692c994f54dd9b773c55b44477c2face02d095add3a
SHA512

338d57d1c4579b808e9b2f502c1e41d83620046e8b6ddf9d57262b8bb5cb5793f594f3e5a9848c4a4bd600e31b4c1d318e4d92e4d13f367516a6c8ea9d6eb841
SSDEEP

6144:qUk1wTXLCqVM6HmA0YRkU0xqjkh4Jz7OfeiNd7kIHR+ovWftwmt:5dXuqFfkzx1Kl7Ofxj7clvt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/60cec2b7e0df1c0b13e6b636ae979b2e6abb5e567a62326bf36c73c84a348636.exe

Files

100db370d21c6125afd6d3358d100860.bin
.zip

Password: infected
60cec2b7e0df1c0b13e6b636ae979b2e6abb5e567a62326bf36c73c84a348636.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ