3291140e205c27b2b1376990d7fe78fa[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3291140e205c27b2b1376990d7fe78fa.bin
Size

275KB
MD5

6d8cff2a20f7ed5009583e37cd8a701c
SHA1

e6e6a26d2e92c1068afec90962a7aed29094e34e
SHA256

79fe114ba8b0a511bf9c9e8d7afcb74dd85b0fb3c3466fe252d19dd7ef6ef626
SHA512

1773ff7c638f2ad14a24a5890511f1e3682c9ac737d651da82020512d424b240c22f69914c7deedc07147684abb33e8f83a4313196c5fe2c857b3a3193f6eba0
SSDEEP

6144:r+PJ1B1LgiOnSJbr36eTBKqYAZrC6Xd2chEbTs/MDG0ywqQ:yJrOE/BK9AZOad2chE8gyU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3afb4b16d7a9aac77226467a1fcd4eaf035c19dce39d926c975aff0e551d29ff.exe

Files

3291140e205c27b2b1376990d7fe78fa.bin
.zip

Password: infected
3afb4b16d7a9aac77226467a1fcd4eaf035c19dce39d926c975aff0e551d29ff.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ