1d89cc501c42c0d876f13553ea2bfc42[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d89cc501c42c0d876f13553ea2bfc42.bin
Size

35KB
MD5

1d89cc501c42c0d876f13553ea2bfc42
SHA1

6ed17ed8b8324d8129cbd77c2a6614f8e376a8dd
SHA256

35cb6b94cf75cea955fbd15807478d0ca37952f4cc0a5788d34cd51ee51575cc
SHA512

d97299c12ca475b48c12e3260331e139f939a9ba791391a4916e1c3cb9c4c73f5d316f870bd1b0138eef40de376ad3c6783bdaf7eef2cf41a64c84bef2bd1ab0
SSDEEP

384:4b4/hVYyOeZ/GkWayJLf45pQfjej1dT698cFRtx9U+HSk8CpV++cuF7FQGNNLdNB:4b4/MyO0/iNDj1HU+yk8CpV++cZ8ghC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d89cc501c42c0d876f13553ea2bfc42.bin

Files

1d89cc501c42c0d876f13553ea2bfc42.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Si\Desktop\G.5 Crypter\G.5 Crypter\WindowsApplication1\WindowsApplication1\obj\Release\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ