57ccb6f0bd910fed428761828ae93553[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57ccb6f0bd910fed428761828ae93553.bin
Size

2.8MB
MD5

cb48d47f08eb8075b5c357f167881474
SHA1

bfb2e6132c4af8e4b17efc7942cf925ad7fba692
SHA256

2673c7e8af0f39dd96930278f0e631a3dfcee609111a2712dcbd6f3f59feb877
SHA512

f4bfdb6eee80a509982b04efe8ce93de468ddbada8e2dd56309917381399adf1f1656a1e0e1715c0caeca73cabba51d6b4d54d704cad48ab441e2bd76cde2786
SSDEEP

49152:g/lruTDM02MscV7wWRALGabKEmcqQxNT1hLxO1c+K1x4gIt0t:g/lr2QRcNwWRAKa2EmcqOhLuc51SG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7d357b523b5116915747af1fb0d5e6b20a472dd08fd4eda3d0733aeaf70dcd07.exe

Files

57ccb6f0bd910fed428761828ae93553.bin
.zip

Password: infected
7d357b523b5116915747af1fb0d5e6b20a472dd08fd4eda3d0733aeaf70dcd07.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ