a4c1ea4b6e69e69462efa7659ff6f48c[.]bin | Triage

Sharing

General

Target

a4c1ea4b6e69e69462efa7659ff6f48c.bin
Size

1.0MB
MD5

9d65a795388beb99ba68697f172a9d16
SHA1

3f3a1d070c9a57ee1ec00f57f3cb6a42e037eb42
SHA256

9cded246ef6f4abdd876e46eef68309532405c281aecb1bfa66131e2d303dfb4
SHA512

3ffb7a3724ec698b0cc312c41a00d535e0f531c6e44126169f0127eb6e5df8a8d8bb56c3b672f5c058e22eca4aa20623273ef231bbfcfff51ede500f2fde87f8
SSDEEP

24576:4BhfFbPyCJFCiyiXbPZS6R4SadGkSOPGA34v292ZULOJK8:4rNbPDFTLXbPZSG4LZzM2iULOJK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1abb33b881408b0341a530de14b0afdb88b96ffcd0254dd397848db3e6508803.exe

Files

a4c1ea4b6e69e69462efa7659ff6f48c.bin
.zip

Password: infected
1abb33b881408b0341a530de14b0afdb88b96ffcd0254dd397848db3e6508803.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ