324d2a434b8a3e038661a75587e303b8[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

324d2a434b8a3e038661a75587e303b8.bin
Size

309KB
MD5

0bf722e31763c01021756459a1fc3938
SHA1

0b78c6380d651afb31da00c38566dedd215da29c
SHA256

34970ef5ef7a2df58d364af87ed397be43c9adca7b99275309cf80a7004cdc02
SHA512

75d61a0bc3e2cb9652099cb92421224d7292f1c2ec845b5417d0d144f8d07cc06ef398bf48b273deee9ef0a1c7a3faec40b56a75d43334e8f6af5c4e01d99d1f
SSDEEP

6144:NiFh/rQIQYa86DFO9jxcCIyntvBY8n2twvdN/hZQTmiBAOH3nfh8:NiF9JRpWitvBdj/h4bHvy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5d06ec15c9349e9ae13d477fdab3d1a50b9bf784a726aff3a48dbcd5f99e493a.exe

Files

324d2a434b8a3e038661a75587e303b8.bin
.zip

Password: infected
5d06ec15c9349e9ae13d477fdab3d1a50b9bf784a726aff3a48dbcd5f99e493a.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\ey554xtmg\obj\Re\ease\U&.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ