11a0cfd6b18f2973e0e8e6681191617b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11a0cfd6b18f2973e0e8e6681191617b.bin
Size

585KB
MD5

29eafdbe4df615ca23ef7b5c554f6ea7
SHA1

64fee46db68b3ca0923bcd9bf576baf39820b717
SHA256

69581361fb98bec4c465606677ed9b5c1f05e300c51f3ece68004dd8692d9c1a
SHA512

1f573900f276fa2e84f492a446fe5e0d881e35d53eb70b2c3d45aa4cecce4102915faa47df9fc158eb6be203466d9baca2af2d853919e778d8b3e27e2d4eba44
SSDEEP

12288:+1qN/NxJeBDvKMKhAOg4738pkCvh0ysoiAAiqJQwt4Vms:VNVxJAT2gXhJ0ybiN7d2Vms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/771345cacf6009f18aee571afcba07b7d20f61e411c23f15a1d2b87803c68bee.exe

Files

11a0cfd6b18f2973e0e8e6681191617b.bin
.zip

Password: infected
771345cacf6009f18aee571afcba07b7d20f61e411c23f15a1d2b87803c68bee.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 598KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ