2d9132f8cb67c74e17b5c9a97d97d98b[.]bin | Triage

Sharing

General

Target

2d9132f8cb67c74e17b5c9a97d97d98b.bin
Size

587KB
MD5

63a193406b59a1cff8c7c199eceb352a
SHA1

f39cf6a6221385402e1113d1be0898b0a8c2445d
SHA256

3932e58c33e7bd1c39c4fe313f0e52c6d42fc5f03de74513b2e11dcb3e0442b5
SHA512

5089eb896ba0deebbd372af96a3103deee20fba7455938aba395486782bbc9f6ad0dbf88e3db545837e0ecd7ceed54a1f2851789f7c813283a6a896ac79e9c5a
SSDEEP

12288:wkL57PnFa3CLA8r0YeVv8KqGpdWRg40PUxh2qpyBFhqMP5BQP/3w:wA5TnE8r0ZV0Kvpdkg98F8FA1P/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2aa8ec244fd85957972c5dc5e2d05f8485e7b4becd16d68e4e0dfe5594ce7272.exe

Files

2d9132f8cb67c74e17b5c9a97d97d98b.bin
.zip

Password: infected
2aa8ec244fd85957972c5dc5e2d05f8485e7b4becd16d68e4e0dfe5594ce7272.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 907KB - Virtual size: 907KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ