2c4cf819ba86ce88e6bb352d159d353b[.]bin | Triage

Sharing

General

Target

2c4cf819ba86ce88e6bb352d159d353b.bin
Size

757KB
MD5

dc2e2365b7a53efc2429fed5f3f82cd3
SHA1

4df75d4d297f758be60d8668ffff76a5a4077bec
SHA256

e19a57bdd0541613680509ec07e1c62f30bc58307e45db642d9a6561b2938b04
SHA512

f920f3d79774a5feedeac744339c8617e55d6fa494cfb6756c9635202c0a86fd66289139da2bd7e1b179701d9d967d4ef850bc72bfcd20cf92410f98a624c9af
SSDEEP

12288:MxsnlbGiMskCn70tWwN279MGVjwYFeTs155upBgeDxpEcsiDtNz9N:SsnVVMQ4MpMcjw4ewlwgeDxp2ibBN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7eafa69b06a236e9dda3903e82a08228808f1bbb3c470eb7bfae0a2f4b13ae4f.exe

Files

2c4cf819ba86ce88e6bb352d159d353b.bin
.zip

Password: infected
7eafa69b06a236e9dda3903e82a08228808f1bbb3c470eb7bfae0a2f4b13ae4f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LYxw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 819KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ