ff3aea929347d0168b02de5d2c2bcec3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff3aea929347d0168b02de5d2c2bcec3.bin
Size

485KB
MD5

063194064f667088babe4c863a0468c3
SHA1

2b217787185da226f182630150f7fbed46b7adb7
SHA256

a443445abb02a4352781109b5fdd416ddc3551a71019d076ba2c99dd308ea021
SHA512

061fb561049b95fc45fd01e5a2b1366a7c63dc095d3c77f40f45d9bfb683fffe29e2b21a5d3e7526c823f84136adaf69af755a83c796ea310b1f9fd9eb824883
SSDEEP

12288:8a2jHSdUMMJfE3B2RBTtq82s1bwTVO2cSgXJ386L9X99UC0b:8a2UUt9E3EYc1sJOvs6n6zb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cdec22b746d955eea4a995cc06795a0964af334d9ad48d9666fa631cf594e651.exe

Files

ff3aea929347d0168b02de5d2c2bcec3.bin
.zip

Password: infected
cdec22b746d955eea4a995cc06795a0964af334d9ad48d9666fa631cf594e651.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ