42661ea68d2293c67cb878d88257f7f2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42661ea68d2293c67cb878d88257f7f2.bin
Size

320KB
MD5

dc79c4b1c0c599821fe55389ac7c9988
SHA1

a8db5739b0139f64ef9429df246e914c53d9129f
SHA256

db123155c605bf0e179262c2debeb35bb564796b2064767e64a9f8417a1f6d62
SHA512

cfec3664103501b1f06ee256ca3f4df22a3d38ccf754560fbc45cb2bb01fac14d713c3c2c68a1899f40325b7623457daac1125eafe289ccf435f1fce55614100
SSDEEP

6144:xMKCwHpO+exW728iUqDbvg23DB1d084ADND3YGrOrze3S5gLzLs2zko3/aSNTBh:21+eoq4sDB1d0xADNMgr3S5Edzko3/L9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8157fd69bd3a3259d7911729323d4fe91eb4745fdccf2b605787b956ffe8d1c2.exe

Files

42661ea68d2293c67cb878d88257f7f2.bin
.zip

Password: infected
8157fd69bd3a3259d7911729323d4fe91eb4745fdccf2b605787b956ffe8d1c2.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ