dc1dd88b7a15113f358444dc2aaf4498[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc1dd88b7a15113f358444dc2aaf4498.bin
Size

20KB
MD5

c9468ff7dec10a0b5863947acf276929
SHA1

62a72c0f140be77c52a4d1fef70e7475c1e1ffa9
SHA256

39721fd40e2ae95dbc890ac204dd57c69cbc892250b51f3239a8e15e5bed7b0a
SHA512

aa4eec56b14f9751e1445270554961e2782c17c0ff78d97de9823591ee832eedacbd140a6466f3ea63bb8504b1a7c241710fcc59d3318e417d6eb3b5986a7349
SSDEEP

384:7RA21nxKdWjavzqzOOxOP6rvUniNLwqWAoZLOK9Gsian77:7RA21neWjavGd7bNcqWACiK9GR27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/041a1ee7a56393de29118086e1f2e2432d865e156150a46ad8ef2c64e0becdc6.exe

Files

dc1dd88b7a15113f358444dc2aaf4498.bin
.zip

Password: infected
041a1ee7a56393de29118086e1f2e2432d865e156150a46ad8ef2c64e0becdc6.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ