22f3e4a1d074aec6cbc7314efd0f53e0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f3e4a1d074aec6cbc7314efd0f53e0.bin
Size

925KB
MD5

492984c7a58a4f8f1bc1d2c9e2b6d3f9
SHA1

935d631176533d8ca713a8f23f31cfadb936b600
SHA256

19f9bc225d840c2d1937a35ad224b2c718feecbf557571c57a2c58eaf36b6846
SHA512

10a0d75a6a85219837adf7249a17065175c175dbb4a41eb09d8156fea4c43069e14b4bf7f69bb3028e79347e0abd1fda87d5008acd53bde5debca198b47b1277
SSDEEP

24576:rgpjbZnPrmr/nO+Zx3thGPdhuOr8xuiJbCOFjNxKS01c:EpfZyr/O+P3GPd1r8xDbVFj2SL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2d6eb4f35570a71972008b6f1e3572aaab6d0ef97e19c42dbc68aeb57b670964.exe

Files

22f3e4a1d074aec6cbc7314efd0f53e0.bin
.zip

Password: infected
2d6eb4f35570a71972008b6f1e3572aaab6d0ef97e19c42dbc68aeb57b670964.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fTTh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 940KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ