Cargoose[.]bin[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cargoose.bin.zip
Size

225KB
MD5

e3e62791fa76351bc28c3e8a8d25af73
SHA1

b499a35ce05711c0f7c9af937496ead42a3c1a9d
SHA256

11bdb880d79be16ad3076f2beb72035c3b27991926bc6e4491fdd3a95a8eeb6d
SHA512

5e32cf4a938d4ee164bead89e71777724179d405fcdc3a225fbab827c22db7938bc6d2cb631ecbb5a6358b74ed25d129415ac119e03f8802c8ff64da866a01f3
SSDEEP

6144:nhjV+EuAGmm+A8lCVJGU82fsOX38/pTmQHDPq5ggxk:nn++w5sOHCu5ggxk

Score

N/A

Malware Config

Signatures

Files

Cargoose.bin.zip
.zip

Password: infected
Cargoose.bin
.exe windows x86

Password: threatbook

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 904KB - Virtual size: 903KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ