054bfa3b3a6ad3e2904f01ded716c1ec[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

054bfa3b3a6ad3e2904f01ded716c1ec.bin
Size

538KB
MD5

9caba1d9b1a9259c7d48758d77a68db4
SHA1

def46770dd8602a042138edab5170b50a85f50a0
SHA256

913321bcf838279e0ef06c23fa1f044fd6e88be5523cfbc2a0431c7e356ffa95
SHA512

a48ca0de5ce30e556c0689f5f3cc6088d4ba89311bbd86a87f8e04065c098f533cad7e5509446892bd5801fe8dee53530f216a8e8a76f13055f7d9f7d223ce34
SSDEEP

12288:CNW2gpY7wDitot0kPUPwl3zQmpQrbV8B5mYd/nWLm9AUqeZZXx2H/J:+W8totcA3z9ObVRYRWLm9dqeZ7KJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea.exe

Files

054bfa3b3a6ad3e2904f01ded716c1ec.bin
.zip

Password: infected
efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 881KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ