f4c0448c427e926b0d3c0d1fbc1a866e[.]bin | Triage

Sharing

General

Target

f4c0448c427e926b0d3c0d1fbc1a866e.bin
Size

174KB
MD5

5a412d6e4a8d2505c6794312c3160865
SHA1

60ff0de3962245ec28db420587f2533b24b0a5c9
SHA256

442536376e12b3cdcbae19cb9af21968717e337faaf0ac55d16910b0a7121cdb
SHA512

3f1a2bc8b1ee87e61d6bd5727ebee27bfe47480286f108fb274d31494146fbefccca0a119c69c42248b4d8af6189e2e56d2efd7f530cb21ac7dfae1016f6ddbb
SSDEEP

3072:dyleU98TLe6VluAhLvX1fxk0IiYHq8qakyk49F7ihyqtaEW20/R5y0bMaE:dyleU98hV9/1DX/fyki7oyqtW20bNbM5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cee3904c1eb0245328cbbe8770f69417d56218ba9ed6ded95d60183264557fef.exe

Files

f4c0448c427e926b0d3c0d1fbc1a866e.bin
.zip

Password: infected
cee3904c1eb0245328cbbe8770f69417d56218ba9ed6ded95d60183264557fef.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vQEIiVK6q7yMZDUH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ