aaf817515d979805f44294a29c78adc0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaf817515d979805f44294a29c78adc0.bin
Size

416KB
MD5

509e6c78a5b7f47b17751059bc812f45
SHA1

e826b4e3fed6562f6e516becc2d3b1699fadc469
SHA256

fd6eda56cd270b70296714fbdd704d5a8e7df6db1d8be1e75ee39451cf850c62
SHA512

40de9b8f2201e0a56eab8ca22f091584db7a0654063f3c8d9b00b09fb1dfabb81b146b38468cf47e26ef73d3e9147b0a74f23c526008402f4b24db466ebeca2c
SSDEEP

12288:qJzJa7PZ0H9cbhodk66+LuSiKVFjZj7snxh:qJV0Z0HKqdJ6YUmjCj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ac56d91f9e736d3354f645796d5e476cb29a60c1fe69593cb17ceba515e97038.exe

Files

aaf817515d979805f44294a29c78adc0.bin
.zip

Password: infected
ac56d91f9e736d3354f645796d5e476cb29a60c1fe69593cb17ceba515e97038.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 542KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ