0f49bb0c2a604fa78ec0bd36b0a7f364[.]bin | Triage

Sharing

General

Target

0f49bb0c2a604fa78ec0bd36b0a7f364.bin
Size

546KB
MD5

39e2a51852821dbd44aa7bfe51322103
SHA1

4c10faf4febe62e476680f8f3c2f4b05f65f5997
SHA256

667d1a9be9f423812e49f18cba769bb86548f440fbfea777768cbb08261f29fd
SHA512

37bba2938667242fedd916ccc3311e2f916bb0e32aa38350702aa69f1b93ad2fd19bba2ffa7c0697184b28de5de4e6fcdc7a7b2be45ca3dd1feddeae24f9e150
SSDEEP

12288:eNEoG1WJAPrU97+jHSz8zqMrl1LTuCPqiWoExAikMwPErO6:6CWJAjU97+jvZppiCPqiWeFPaO6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/060ad64d6e63aedbc2250c784d91852e3c2e113aca058565c8988d1930220a83.exe

Files

0f49bb0c2a604fa78ec0bd36b0a7f364.bin
.zip

Password: infected
060ad64d6e63aedbc2250c784d91852e3c2e113aca058565c8988d1930220a83.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 546KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ