77c6cb2b09b93866ca629e3a08d6a745[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77c6cb2b09b93866ca629e3a08d6a745.bin
Size

57KB
MD5

f7c4804b5d75bf9c234f287bcc3de318
SHA1

b3f67d3a146c7b0c47583fa38f84b6b3ac5ee3f7
SHA256

22cc0970bbb6e7b2a6b0be5f06bcae341152ddcc475dad63545f488dde281aa8
SHA512

36588c431e051eb1765bf7be70f3eca4b9c690100e754e7840ac050a240b5b1ddab0c98256abc146a631549e32b2872e0cb894198f55ef96ac0939e1761c3fb9
SSDEEP

1536:orIOjmMYrxq2qJrHbfeQ3F00C/KDjoPTe1gPKnwRUueD99:orIMYrxX+f/3dC/KPotUue3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cdb6153d9363a9cfdc7252d913fd22c77584120ce5a04ec485a938fffdb18b85.exe

Files

77c6cb2b09b93866ca629e3a08d6a745.bin
.zip

Password: infected
cdb6153d9363a9cfdc7252d913fd22c77584120ce5a04ec485a938fffdb18b85.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ