ccd1edccbd14c9c0245099ac2920be83[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccd1edccbd14c9c0245099ac2920be83.bin
Size

658KB
MD5

f172cfc3ea244ac928a5272890252457
SHA1

2849ab2970cff7aeb168fed8523078d7990b95c2
SHA256

b1be0c59926872cd62d92c04b5c38cb24a762e70d57340a8b0af93cf08ac0989
SHA512

8dfa94ef6c7db88302d21e72cea39016de44b1a2457dcb997b356ff1f7c755eb393a50c75a8dc77e1b313836e3a07de926b3b2c24d4bbb88aa5ce431524ffc74
SSDEEP

12288:Y90//Tcqc+hF1VyBfhZm8yXkVbIznn2/0UHItHyuMEe2bYey1q6FmRsX7zboW:YETcqc+hF1VMfH+6A28bHOj0+X7v/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/56f69825010da76642ee25cf55098c51f6ded6f6fe2718b6c69c1c4b74b57c65.exe

Files

ccd1edccbd14c9c0245099ac2920be83.bin
.zip

Password: infected
56f69825010da76642ee25cf55098c51f6ded6f6fe2718b6c69c1c4b74b57c65.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 685KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ