f474a217c3aef6a4bc1294999edb5dec[.]bin | Triage

Sharing

General

Target

f474a217c3aef6a4bc1294999edb5dec.bin
Size

631KB
MD5

e25fb5c94aec7eb00c3261c48b1a1f0f
SHA1

9e4aa3dc0b5b4fc6e73fbe1e44c688a70f894b5d
SHA256

74a7f4513d7d29b61e8025336bd49c5b821f655006773bc935bd4e37e50aba7b
SHA512

02258916d9f87d2c182c087bf82445bcfa44d5d6b3c3b9974cddcabed777a1176ba7b0d43d012de9132aa9c79a2981758f2aa3c68fcfff527f061450f27734b6
SSDEEP

12288:1QH6iO2S7JyOYQlKGfuIaBXcP5rrDUw2GFj+mTmb:1AwNJynDGfnaBW1rDL2pN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9960236e7b8167ec9b3ebc5426392923b89f58763b83c914bd34bfd93ad8aaab.exe

Files

f474a217c3aef6a4bc1294999edb5dec.bin
.zip

Password: infected
9960236e7b8167ec9b3ebc5426392923b89f58763b83c914bd34bfd93ad8aaab.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ