8afafd9b38a273c6d714c632f5c547ba[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8afafd9b38a273c6d714c632f5c547ba.bin
Size

646KB
MD5

ec3b6515e4e9ef74069db44c04874a85
SHA1

328b25ddcbfc01152809aa4f5f2c53471fa1858f
SHA256

e321b30ece90e6d98ba6ba4153cffadb9a6616b47fbe442514517b08ea3073b3
SHA512

f8e25a6c31dec252a19ccda8454e6a840b35c3e0a3524a53191273ebc02cfe6c5f285df75a313d8f3aa018f07dcaf2cf555fef5ae47a94a167b41ff3e9d3508e
SSDEEP

12288:sWaic6SYhdRseYbQBTv/cPf3kqe26RYFA3jbM2JWXtuEG0c:jc6SSbhBr/cXdYRXE9BG0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ecbd820686317cc38e97ceac59f26f853bd924695b2d124c4e87f5f48c82bd63.exe

Files

8afafd9b38a273c6d714c632f5c547ba.bin
.zip

Password: infected
ecbd820686317cc38e97ceac59f26f853bd924695b2d124c4e87f5f48c82bd63.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ