dc88455c904d18a3c2b9b025e97c8af6[.]bin | Triage

Sharing

General

Target

dc88455c904d18a3c2b9b025e97c8af6.bin
Size

652KB
MD5

461e781da9002490b754d148783ceebe
SHA1

f4b923796371ba238ea00ae5c07b5fea4a68f7e4
SHA256

48eef05c2fc5a87a9a0d644dc5c8da570e880dcf297c7b03a73c99386c101baa
SHA512

7e45c3a192b670ce1f0202d7b0da4e5b896859efb6a65682c318934cf69c793cd31545047d6d1945064704cbbe1a1172316af49b75f7cbf384db67a71251a618
SSDEEP

12288:Dpcjf7+KnMB5HITapdrDJhZ7YO6loMg4K/jODyQCB41kh6vMEAPFcqc8RF:Kj6OMDImpVDOnoMg4K/jwyQSvh1NdfF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0892cd1f8e39fcc175e75c553dc406819a278c39f56fe2d8236b7ef283af1125.exe

Files

dc88455c904d18a3c2b9b025e97c8af6.bin
.zip

Password: infected
0892cd1f8e39fcc175e75c553dc406819a278c39f56fe2d8236b7ef283af1125.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ncYp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 726KB - Virtual size: 726KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ