HDCHHelen[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HDCHHelen.bin
Size

6.1MB
MD5

cb8279338ce5cccd21a49571efb32eb9
SHA1

bd1fb92c7d4c3cbb2763fb8216276b0f8e8f97d7
SHA256

538ec1961ec0bb92bae128552571b85ee324f24a2bb83a8ef2aaee3fe8018152
SHA512

d5de3d24c7b2d4c9846fb76deb0a3e918a3ab17fcd29ffa47fb2c14e56f866e6580b81e0205d04fd92605f19ae0d64ab799f547914b49d3f9952d7e2de0d9307
SSDEEP

98304:RdB6UreFagh8R9/b2hBqmJ4b3nOd0lNVZ0F0NHSAauB+4CenfgGRXL9Z:ReUdcq/6qH3XN601Sl+

Score

N/A

Malware Config

Signatures

Files

HDCHHelen.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.CCCCCCC
Size: 1.3MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BBBBBBB
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE