e817cc929fbc651c5bdab9e8cca0d9d9[.]bin | Triage

Sharing

General

Target

e817cc929fbc651c5bdab9e8cca0d9d9.bin
Size

2.2MB
MD5

eec9f534b9bcec40cf398b6c9156a504
SHA1

55c2348f8336c9bbae7cd28f8b89edd22a8fd27d
SHA256

a4609b413d497de8eea92104d7e871490e2978bea1b91eb878e41e54b253eaa0
SHA512

171d1725177708ec84815f2b82432c1fd7aa4fd40baffd5fe4f32264ecddae2e989296a3dab2b730692194e64ce6a2028be00924db0859d3967898d139fa7176
SSDEEP

49152:OPGP7JOkZRlx8gaKyc5d3dPXCNMWUebSpClPF:h5LCgaKy4LSNdJbSEld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/3a7327bd54ba0dfa36bbf0b9d0dc820984d6d0e0316cfa4045ab4c1e7e447282.exe

Files

e817cc929fbc651c5bdab9e8cca0d9d9.bin
.zip

Password: infected
3a7327bd54ba0dfa36bbf0b9d0dc820984d6d0e0316cfa4045ab4c1e7e447282.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ