79ca39c42b7192f3aab9104c1cf00ae4[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79ca39c42b7192f3aab9104c1cf00ae4.bin
Size

411KB
MD5

f2b3c3b97a5fa083a2ef6ba9c5f3aaa1
SHA1

8bf38257d67be3cf0e0619bf6223817ee32220e1
SHA256

3efde710582be401e432cdbc50277723a55d6431ad4837689ec8dbf1a9b4211a
SHA512

4d425555388471bcbf80aaf76c39f858e5fb9f234749f7fc56984651b20316020c5254d8f2e5b3c1beb2c44b593d47dd98ff380b8b115fbd2e39050c1e8e1cbd
SSDEEP

12288:m/CLVEOE6G+D23gvaxxDyn3WufFzZZtuwXnJ:ICBEOE6tqyaxxunFfFzZfuwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0101cceb99170510c83d8b7f034a43a1bc61ddff7d4b6eafea69a7033fc5fbc1.exe

Files

79ca39c42b7192f3aab9104c1cf00ae4.bin
.zip

Password: infected
0101cceb99170510c83d8b7f034a43a1bc61ddff7d4b6eafea69a7033fc5fbc1.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ