0dcc21bdebe05957ca2922be486abe22[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dcc21bdebe05957ca2922be486abe22.bin
Size

58KB
MD5

8540d2978c9ad7469efbc79018a99871
SHA1

007324039208b41a7895854b4d95cdaa0f404c0b
SHA256

827a1d214bf0a27396eb6240034373e2cf7be6a82ff215bb9408c8c9e407c33b
SHA512

4f4214dad2dfae6012b862e600a8848752b501c31504adfe78e948b3a8f8d2122662f6cc89b1b2a85db7ea74222da91b11a496cd0ced0a06594106ce166bd985
SSDEEP

1536:LvcOf3xskyJat7MGeE/pHYybOykf5utPcUcaHq6v:/3xskCQ7M4HVvkRYcUcav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/73304b5c73a1c90b192c8748348509c213890807d3ca34b08c8fb84652b0cbd3.exe

Files

0dcc21bdebe05957ca2922be486abe22.bin
.zip

Password: infected
73304b5c73a1c90b192c8748348509c213890807d3ca34b08c8fb84652b0cbd3.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ