2808310786effc87a4359c778a73a7ee[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2808310786effc87a4359c778a73a7ee.bin
Size

6KB
MD5

6677469b8928c14e406b5602015494b3
SHA1

b6a28ea8464e49773cd3a2dc2fbadcdb01f77c9a
SHA256

141a4d5ab5b5dc8b459d74152f562c552747efb0b8d6a32c55281c429727f26c
SHA512

c0aff6a1d14b62db5185242c2c54e4b5fb5931dae42eba669db1319dac3211a6b25dda0cd6975d29ab1edde020755f8d715d57d32ae2e2b46032764a52257b57
SSDEEP

192:/sI8TV0XlCJGbzlz5gF8qVQ/fBMvwgoMP+gskFkYXT/x6lO:/z8YLbB5gVVsfEoMGgsfuT/aO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/33d9753ee9b3920352b743d72adfd62c969ab0619eb5673151f478ebdfa197a5.exe

Files

2808310786effc87a4359c778a73a7ee.bin
.zip

Password: infected
33d9753ee9b3920352b743d72adfd62c969ab0619eb5673151f478ebdfa197a5.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\admin\Downloads\Disable WD (1)\ABC\ABC\obj\Release\ABC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ