8cb919da2d28a2e7a35a14a16c2abad3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cb919da2d28a2e7a35a14a16c2abad3.bin
Size

631KB
MD5

107dbda32d5398c5ed7e03df9d0eeb3d
SHA1

f1555e5622056ea7060704800cbf9a3350d5993f
SHA256

eeb89ac520a28aba838ae58cddc0687281ba4270d306a665481a9e8f1de22d50
SHA512

c5301875f7fa7945467e1762a2fccc777c0bcf70b88daea4d4dee682f1857b63dd755d8d83ce8c818ab313ee899500cbddbcd0bcc3835087012099384e4e5ad8
SSDEEP

12288:GOLJgt7LDWlCYYzGr1TpNyxVdVRIf+6fXwuHvatW11bLPT4Zv:xLJ47LDQmGr7NyxVRIBXvPaANTyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/38a05c98b7bd7131bc6d65dc7c5b2a68c63c63119a32012faf1981aa6f40a9c4.exe

Files

8cb919da2d28a2e7a35a14a16c2abad3.bin
.zip

Password: infected
38a05c98b7bd7131bc6d65dc7c5b2a68c63c63119a32012faf1981aa6f40a9c4.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YmDL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ