fdb40fe39d271c947656838f2cde9d7d[.]bin | Triage

Sharing

General

Target

fdb40fe39d271c947656838f2cde9d7d.bin
Size

637KB
MD5

828948e66e6914a705909cbd90cb5fb4
SHA1

c9214d26a4497b68b43f5e8c4dfa246bd63253f8
SHA256

2b6edb2e98fc5487b6292edba19906339bc40557027f062bc2f10f26862f05f1
SHA512

e8e0d6da8ee684ee3d43ff5d272b6d503255e6fa198c048ef6b20cdebb5f5dc719fe34734bbefb19961aba8f5112244b4acbd30f06c8906fea77031a279cfbaf
SSDEEP

12288:/dZafsLqjImhETkMgDCBnbMk+vq6h0SbpYq5oj3b6wWKZ/22KP37VZ79anvX:Vs1jImhZMNMvRmz3mMZyjD92v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cfe2721470f3d2165536a03920786dc6ad9a85cb8efd74362be8315ed261cbef.exe

Files

fdb40fe39d271c947656838f2cde9d7d.bin
.zip

Password: infected
cfe2721470f3d2165536a03920786dc6ad9a85cb8efd74362be8315ed261cbef.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ