e3e2300616cc1112ffe8fae1901eff5c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3e2300616cc1112ffe8fae1901eff5c.bin
Size

443KB
MD5

f7749bb10ab5cfe4824314fbcfe68c26
SHA1

61fbba0a3b7f8d7b3330cbec222c869163d07506
SHA256

2241e4fca5978bd0ce870430986e3c191f757eea4736945c57b7a590e9b108b2
SHA512

ec73aad64ce259845928f8071d150202f5832898116d81abd07185934467a6fb6a5f0bb0657a3089e3695b3f1d510661610b4748a39152c8ab13a68dd6c6d18c
SSDEEP

6144:zRGgdOaE2XBQSicJPeAfCSDshtzmR58aRITbieSgV/5O6Db0uOSa48:lGf6h7aSwh3Tb7T/Q6D58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/aed6503a004a4b55c2e8be34624a376a3c1f8286f9e45780b5df6e11ecdd9123.exe

Files

e3e2300616cc1112ffe8fae1901eff5c.bin
.zip

Password: infected
aed6503a004a4b55c2e8be34624a376a3c1f8286f9e45780b5df6e11ecdd9123.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

ZGNAq
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ