af4c4394fd76d48c76265fa7393dbaf1[.]bin

General

Target
af4c4394fd76d48c76265fa7393dbaf1.bin
Size 615KB
Sample240609-exbh3sec29
SHA256 9c49954ab17359f4041b7f7eda9e00ff2aa2f3f7ced562d7a848f1924decbebf
MD5 f9812b2bf194af902d53241929c7df5b
SHA1 cf07031efc5d3134d9389291c49914387d387b62
SHA512 14ba1420670f244646eea4c671779a3e3ba65e50b640461c260cff0b8c883d61afd23f5763627b9145c61fa34f11b2f1ac3001d54b391871fa196d6b1af5ec6b
SSDEEP 12288:xLp8K5BsbdOA1ji6BplAiJa96RGM1DrXtpZ8lBA4DENmTIx7nfDFh6W8pi:s12MrM98GM1H9OZEQTIZJ80
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844.exe

File Explorer

af4c4394fd76d48c76265fa7393dbaf1.bin

.zip 615KB
4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844.exe

.exe 635KB

af4c4394fd76d48c76265fa7393dbaf1.bin

SHA256 9c49954ab17359f4041b7f7eda9e00ff2aa2f3f7ced562d7a848f1924decbebf
MD5 f9812b2bf194af902d53241929c7df5b
SHA1 cf07031efc5d3134d9389291c49914387d387b62
SHA512 14ba1420670f244646eea4c671779a3e3ba65e50b640461c260cff0b8c883d61afd23f5763627b9145c61fa34f11b2f1ac3001d54b391871fa196d6b1af5ec6b
SSDEEP 12288:xLp8K5BsbdOA1ji6BplAiJa96RGM1DrXtpZ8lBA4DENmTIx7nfDFh6W8pi:s12MrM98GM1H9OZEQTIZJ80
MD5 SHA1 SHA512 SSDEEP

Password

infected

4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844
MD5 af4c4394fd76d48c76265fa7393dbaf1
SHA1 d08fe29a6362e1416ea464766beb2e5120a8d347
SHA512 fa0a58d48584e3547c643c5df0f2783ba73d584306630feb4a9abd32f583df48d25339ed964393e12c52717a33168c9e65ea6b58c6e6525d9ed216952a895738
SSDEEP 12288:Ia9PJCwxBS/ktL8picnoYgwkSpX3MBdkFIyFLkEseB7U5UjJJ++BzqyJM:ICPJCwi/+L84tSpHMBqGydkEseB4eJ+I
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

655614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

LHjd.pdb

af4c4394fd76d48c76265fa7393dbaf1.bin

4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

af4c4394fd76d48c76265fa7393dbaf1.bin

4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844.exe

mscoree

dotnet