5c87de108cbb7f7d04d47ad19a31744f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c87de108cbb7f7d04d47ad19a31744f.bin
Size

15KB
MD5

52188d394fd4b7b487129060cf279b27
SHA1

47244d66b53383d6ee8606c060e45d7b230359b2
SHA256

b495faa4d7c27b087fcb6b65d3a535996734ab6e11cb1c4b925bcd48119a7b51
SHA512

ba35258ee659855456a9e0ddd600a4a2f3e27d2661f11ee0eb2090f23256980bd49a0fad6b83d24df804d4e2a0b6b056e7ef0c44391cbc638c705f753c592b80
SSDEEP

384:JxaLJKeWPQB0SaGb3vBnt+L/coacKmbGAmf26+agseQKO6M:J40TQOvDcoacVaAk/+agseQKO6M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9fd805edf5687ab1eec97b8004a9f1a4d5fcf31a3dab79602d4232a49387c79f.dll

Files

5c87de108cbb7f7d04d47ad19a31744f.bin
.zip

Password: infected
9fd805edf5687ab1eec97b8004a9f1a4d5fcf31a3dab79602d4232a49387c79f.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\adlib\OneDrive\Desktop\silly menu\testplate\obj\Debug\netstandard2.1\SillyMenu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ