2bdfe72452d2c47e9aad6eec291a1c06[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bdfe72452d2c47e9aad6eec291a1c06.bin
Size

686KB
MD5

6e02b0e07f885411c2f0d6cc395a8e8d
SHA1

5074a085feece577b58ba801c463d4c96f605885
SHA256

ca7fb6c88dceafe6c68275937c150e5de95f1217b950136fccef741d05a39ceb
SHA512

97f1b2d311502717fe20cca4e91693849b737facf60cf1c716cc52832a5a7aa40ecaf7abd0181907c64a6036722da45ff70476c9259b699d8befb24d265c5bd3
SSDEEP

12288:Elam63gy5bMeNg2BGxGmp8xiFyEcrGpTeS5HbYwoKxnTwC7Bmsf0b/kpEK:Ewm63v5XGomGMkdS2woWTfBmk0D2EK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1bce8b3e6c21478a929c90f262e557fc2bb8848818c11a93b791603dbec72856.exe

Files

2bdfe72452d2c47e9aad6eec291a1c06.bin
.zip

Password: infected
1bce8b3e6c21478a929c90f262e557fc2bb8848818c11a93b791603dbec72856.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ