ec30649f75893731006dff3ea5620320[.]bin | Triage

Sharing

General

Target

ec30649f75893731006dff3ea5620320.bin
Size

683KB
MD5

37d2394d8083af1fabec3fa89ea2bcd9
SHA1

c6892c61d49dfc3c47fab9158b22a94338737b7f
SHA256

c9c890f44f03c3f7906493240c6da1b371ea963cf7fe746515e6c88048c063bd
SHA512

dffab1c9e9f6e8ec549654d5bd10383bcb798d24ba7e9bf06c194f1381818f91a52ce8814038760cb3473bc96d3aa2a3af2deaf0b2dc0b5569cd16668a2a3d2d
SSDEEP

12288:FjmTrUubUk3ewhB14wu5PHFe0FM1VUFduyt8AitydgPKdZxT6mcushbbRsx/aBA7:FQvQ59NFM1VBTzIxbTNQRM/QARXh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0610f4eaa31b99c543cfe5c6036db65ff93b62f55e8309251db74e0d3efb087f.exe

Files

ec30649f75893731006dff3ea5620320.bin
.zip

Password: infected
0610f4eaa31b99c543cfe5c6036db65ff93b62f55e8309251db74e0d3efb087f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YTdw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ