548f467b892bae9f11df1a44b4b3dcb8[.]bin | Triage

Sharing

General

Target

548f467b892bae9f11df1a44b4b3dcb8.bin
Size

41KB
MD5

9c8064762ac9bfb0292d60033622f33a
SHA1

d8d0f75eb37471ef016720b670562d3dbf96b05b
SHA256

6f3549f16151088eb536fe425c5c3e2185eec34d053074fa6240b1007d8907e3
SHA512

2b048309ae8162b7fb8289584c1de9f3c146171775411f2329fb73468cc08ddc90b51230948ba15776dce63d4bed09097a34d2a7ae4d5af4e4d03ae8d6ea7232
SSDEEP

768:5OnKqjmczPZe5673B5AxBiC+zGJaNKy7ShBFbbeSNZXCbNP1xq3BIlVNVKmnQTIY:7q/ZewaLjJeb7FSN6N2qN/QTGP3ClP0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cf3f2a819c7c08db1e7fe32a1a85dc929d6e2751ce5a206250442b2b246b131f.exe

Files

548f467b892bae9f11df1a44b4b3dcb8.bin
.zip

Password: infected
cf3f2a819c7c08db1e7fe32a1a85dc929d6e2751ce5a206250442b2b246b131f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ