20c72b27e1cc6c08d035b877c344d9a8[.]bin | Triage

Sharing

General

Target

20c72b27e1cc6c08d035b877c344d9a8.bin
Size

659KB
MD5

b6588ac197419118ea4eda439c91144a
SHA1

0bc9cef48eb1033599d15713f81d4959b475f8c5
SHA256

7a4c14b8af373d3c09b14326f6bdaa84b42a39e18f6861e78017c77bec35172a
SHA512

367c6c743e262a07dd7a6aa414869ae2622b3efd6854ff8ad26958e2a014a3ebd349fc7a41e2f6ba70662a7d66399a423e30dc4f1dec45ebac59c7135e6bf81f
SSDEEP

12288:53m2Ok4JI665zBUmyMqt15Edo3vsejj9tL+5K7375xTPdycWR4vXV/IDPh3UsxMB:xTII6mNhyM++dpePf7LDTEb+v1IDZUEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cc13e154f085749c04e4bfc294e1dc6ddfe44781479339932a79e7ab75af1c3d.exe

Files

20c72b27e1cc6c08d035b877c344d9a8.bin
.zip

Password: infected
cc13e154f085749c04e4bfc294e1dc6ddfe44781479339932a79e7ab75af1c3d.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

eWXm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ