2458f330cda521460cc077238ab01b25[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2458f330cda521460cc077238ab01b25.bin
Size

337KB
MD5

7414b70ebfcfaa82683daa3318dd7d3a
SHA1

9a5170f322840f2788404f243a227fd8d397df4f
SHA256

6b30b66f2af4dfebee3cc47264c7867455e040150fc8c0d20032d8bffce3e251
SHA512

1943066e041edc0fe74f20d4124cfc4e7f8e6b1f8725faf38678c26334c7efe3a1246c0a991f1c985ff3c06d095c598ed4629151cb4b06c0db1140b4039e2757
SSDEEP

6144:Am5CYqDZMBPT0RzAT9jk/d3fNpdDMUnqQaty/Nb2uz0OVU9DKTk0c5kfhbgOnBtm:VaDZQKATy/dnAtyF90OVKykOhgOnfnBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dc67b264b90e29cf5cffed4453de4567398faa7f3bf18e69e84033c5b33ab05c.exe

Files

2458f330cda521460cc077238ab01b25.bin
.zip

Password: infected
dc67b264b90e29cf5cffed4453de4567398faa7f3bf18e69e84033c5b33ab05c.exe
.exe windows:4 windows x64 arch:x64

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 969KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ