2abc28bccfd4512e91ac2b8f3537c307[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2abc28bccfd4512e91ac2b8f3537c307.bin
Size

335KB
MD5

bec9b53716e719675f84545d90a734cd
SHA1

0cdb13d13038508783a1f3e3d9c51ff6c0604fce
SHA256

1834324b140e63553adebb89bf2194cfea607d759e2e357859818c6e32e816b6
SHA512

42c9371780437ff192b44450251a5ac3fa8163f644e5cabaf9c88c616fbd4c989f2fef479cebbb0d1e9ed7f545c3d48e28c50e9330bd0630618c2faca5f0081c
SSDEEP

6144:5wFLJHdAmKzZnhuxPN0opVzqEZNdksoVW2z1NtcWOvI/bIuZ8fZrlYbmBu0yK:5wVhgnQxVLfzqEmsarZNWWUI/3Srlkmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fa396ba6c1ae4e9c786cff1a78012d86bd9a896f4999d4ba3b90864021fa806c.exe

Files

2abc28bccfd4512e91ac2b8f3537c307.bin
.zip

Password: infected
fa396ba6c1ae4e9c786cff1a78012d86bd9a896f4999d4ba3b90864021fa806c.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 867KB - Virtual size: 867KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ