3f14789bbb2b7f4c62f213458da97e1b[.]bin | Triage

Sharing

General

Target

3f14789bbb2b7f4c62f213458da97e1b.bin
Size

2.2MB
MD5

80c138b7da76a111c1e7e6beae15a37d
SHA1

4e7545d2bc89e5518df1b3191f09863b79275858
SHA256

b0f8e556135f17efc5cf76119ffbad1f2b15306dba2eb76b22bec1b1db5617ea
SHA512

8aea0fbc1763e0394b1f64970e43494ef212987887309718295d3e0672be591c175db1beb25495b4394589242463232673f17fd2cb733d7b50194ae7ca11ee20
SSDEEP

49152:AwMHmu3TMT9ePjPpu6CA1j69F4t3k78q6JEhcUPC:EGu3TMT9whuwx69F469GEhTPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f80e5f58eaad73e902c8d612e166c360a309e4093bd7fa3451df4495638a73e4.exe

Files

3f14789bbb2b7f4c62f213458da97e1b.bin
.zip

Password: infected
f80e5f58eaad73e902c8d612e166c360a309e4093bd7fa3451df4495638a73e4.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ