12daff9aeb48e2e9f3d2e357b9636f5a[.]bin | Triage

Sharing

General

Target

12daff9aeb48e2e9f3d2e357b9636f5a.bin
Size

439KB
MD5

642cf65b57e3f0e77aff367333a81b8c
SHA1

5cfe8c2331cbd1b32a7b60c299ed2cd0388d0db0
SHA256

85d3ccb4310236b9c89e31897a237fd455e2caf08c8ad0972b4e4cf3221923d1
SHA512

477f38817e6fe118078d59c98dbe2411ad55853f8c918c0d6eb8248f7e79691c1148b1411810eeb31c43634330a3dbcfd782a9d78ca991c9a4e67e4d13596922
SSDEEP

12288:oCirCDE3aEMrryj8RRf9r3TrgMuPv7f41j2vPOL0c:viUE3krmjqdTrgMu7s2+L0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1881cfa52f02f01bd78e903782e69cfbe167f8673b8828371366736f24592518.exe

Files

12daff9aeb48e2e9f3d2e357b9636f5a.bin
.zip

Password: infected
1881cfa52f02f01bd78e903782e69cfbe167f8673b8828371366736f24592518.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 758KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ