54872ef77e1a4e1a4abccc89406fc8bf[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54872ef77e1a4e1a4abccc89406fc8bf.bin
Size

650KB
MD5

d1ebaa4e0fcf667f03ad25efd95bfa9f
SHA1

54a2bd4cbb9e48e48f758d2cd081f723893471d6
SHA256

95f61267136f9b8a13f40bec5e66e997820c1039c6a33ba43d3f6d59ff432dd4
SHA512

54a43e6ccfcc4fb1a6898490140ffea8f887fccd80a8cbeec2b02bbdaf5129b04e67372bcf1b4f785f8517331660afccc929f4611511dce6a8b44a0db42a8afb
SSDEEP

12288:coUtZDHsdV0ctBbAj5c1vjkIfPz2+Yv6w8Gn2wgR5RGbZqqtXNBOBAQ+5q8Z:ynrsYuBOujkIT2hv6w8HHbKZLToBAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/55cdb9093bbf832ee7f903cf8fa2ebcdf46c6c6867ac67e6f6fefa5553d8ed60.exe

Files

54872ef77e1a4e1a4abccc89406fc8bf.bin
.zip

Password: infected
55cdb9093bbf832ee7f903cf8fa2ebcdf46c6c6867ac67e6f6fefa5553d8ed60.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cnhs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ