776e97dad3071bc1fd1ac1365cf8c743[.]bin | Triage

Sharing

General

Target

776e97dad3071bc1fd1ac1365cf8c743.bin
Size

3.3MB
MD5

f4d8b7c51bc6833000bc281d7b1c4203
SHA1

5753e6659cf8074082352bcd92309800893b1e88
SHA256

4a14203cc7d3222f209678dddcd1a727e0fe137c0e7ad27aca365b3f415d5f0d
SHA512

23192241e06ea5afc4458f7ad3ba1a006187adeca8debd3f31551022d18be6e2f0087d8247f22345fc19a3736c443976f5977b869d3f7ab3b02520c63c340cbb
SSDEEP

98304:u6NinEM9j3Ad1IG9OD+ShIseF3i+HUKpG:u77je14DeM+HW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/94e42c4fee044a71b982054b06a77bc335aaf1e542f66422a75de3ea207dd77a.exe

Files

776e97dad3071bc1fd1ac1365cf8c743.bin
.zip

Password: infected
94e42c4fee044a71b982054b06a77bc335aaf1e542f66422a75de3ea207dd77a.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ