04c85a2f0a488a1817cbce4120a85433[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04c85a2f0a488a1817cbce4120a85433.bin
Size

57KB
MD5

90f63bd8e96bcfab6f5439c1bebf18b7
SHA1

986b2e14e6ae568c30cebad3d28d9e67bd181f17
SHA256

a26d86fad62bfb79201e337c9af7afc6858aad2b24e6f2180d5e38c77517cebf
SHA512

47b78fdf51430fbb8448ee0030c48ab872166d73ad92c175ac3addbb84f63444a8d180cdf15772804be48604f55162d1c0ad3277bcc908ba31fef64e3f434772
SSDEEP

1536:F3A//H1c/s72r6OXiG0I0Fx6SA8qeuaUbt/z9ijY2t+wrCsG7:FC132r6OXr07FdBqBaUbR9icAyf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/647fe8f29a6c009d9c07c13b8a1de03a8fcaeaf276de40cbbfd03b58f1f6e78e.exe

Files

04c85a2f0a488a1817cbce4120a85433.bin
.zip

Password: infected
647fe8f29a6c009d9c07c13b8a1de03a8fcaeaf276de40cbbfd03b58f1f6e78e.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ