2985fc26d5f8ad003d24abd34368d6f2[.]bin | Triage

Sharing

General

Target

2985fc26d5f8ad003d24abd34368d6f2.bin
Size

24KB
MD5

2cf6913204e64b07c2192d791f9e62a0
SHA1

5c8435dd37d96d1814a79d855d7e520654f28e9b
SHA256

faf4850db1918426a2a6aba12146bbcf28f393804a68b8a644a37e0addc0db37
SHA512

de1a9938aae590d2010a95996c847432d127bbdbd36e980fe1e9c59df8aae2db6b438abf514ef812153f2e897c9336757a76d5e0a6aebb0f97c6e529d749ad9f
SSDEEP

384:d01xt2fzJzYuV5TqRp2QY2+2fUdrhnIqTkZgKioLsA05aOp0gBBOrw+V9HWa:d01xQJ7V5yPY2+2cB1IvgKZLsA0nA9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3d6fb00c157c2f2a685f9e0465a67f83f8bada6604a6f9e43cf5c841dcb00b47.exe

Files

2985fc26d5f8ad003d24abd34368d6f2.bin
.zip

Password: infected
3d6fb00c157c2f2a685f9e0465a67f83f8bada6604a6f9e43cf5c841dcb00b47.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ