52c3bf6b32a777a43cf7b59d0c0b6b46[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52c3bf6b32a777a43cf7b59d0c0b6b46.bin
Size

681KB
MD5

5e1f1a60c13c6c9e41193e708249b92a
SHA1

47ea199b09d5609a7578d614c1b939ee0936d13a
SHA256

ce03b7d4f9169a0be3639c09a6446a344a8cb4568020f41b2d349f17308b9755
SHA512

cb6298a169136c1b2b8ed36a4966ce0f95c02d8bb117a8cc6bd83157d5569cc04f089cfbc5c4b2b9377ca6785c5da7df820143a23b73f27e275bf220c876cf7b
SSDEEP

12288:YSTT45Uy4K417CYWHIuTK/3fMu2VqUL8yg+r/fquuQd58:dT05wUIuWnMuVUL8yTrXquuQb8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1c97deae0a90b78b7801e71c84b3308738b9def07711e0088e985e1dad640582.exe

Files

52c3bf6b32a777a43cf7b59d0c0b6b46.bin
.zip

Password: infected
1c97deae0a90b78b7801e71c84b3308738b9def07711e0088e985e1dad640582.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ZVRN.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ