dfa67f8360b73a2f94e032c5d00ed39c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfa67f8360b73a2f94e032c5d00ed39c.bin
Size

741KB
MD5

0a301adb9670cbe57f10e16eaa76142e
SHA1

2f6daafc23a7c08ab3158ca882e5d7ed895e342f
SHA256

c422ae35aed6fb298f075905b76aa721b7de5117da4dfb2527d7cc93ef824121
SHA512

d7c5639e2321cef9b0134fd6e7dabb368103da5dae224e1fe8dfa5e00b1f917e4f98c8f2b054ba58b4009eff3d1b9c97de91a12d1f6c482c52995d00c2867a7d
SSDEEP

12288:r9fFUbKqLUEx7iClc9LuGI4vAO8njRKdzqnfWuTVC0NOkxqJgceH7ec7Knfq7lMH:pfFUbKzg7iClecgOkdz6WuJkkxqJgc2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c007abe1f3573ab9a0a63e586439590a079da51afe795328b9a0866be4625b6f.exe

Files

dfa67f8360b73a2f94e032c5d00ed39c.bin
.zip

Password: infected
c007abe1f3573ab9a0a63e586439590a079da51afe795328b9a0866be4625b6f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 825KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ