sample1[.]bin[.]zip | Triage

Resubmissions

06/02/2023, 10:05

230206-l4s52agf5v 8

05/02/2023, 02:05

230205-ch61bsfh35 8

Sharing

Copy URL Twitter E-mail

General

Target

sample1.bin.zip
Size

263KB
MD5

291da5917eba92ed2ad425d7e34c3f7b
SHA1

eaf7c5e97dbfeb10a6ef65bd15345517dbf590dc
SHA256

042b78e5e4f85068f2a757aced5a3e32883502782cd77d24960691a1729bf380
SHA512

6e4e840ef98c8946a56fa1ba62efe7be3d459bf1eb315c09b2ccffd12b9c50b551eb70ae44e93a0e75a7238de473e0910aadce869907c3bb5f4190a19c3efea1
SSDEEP

6144:RclAEm/wH4RlM1wRHnOkTr/YXLjE4+0e8a0Lw:yuE5ulM1wRHOyEXLjE4+iaYw

Score

1^/10

Malware Config

Signatures

Files

sample1.bin.zip
.zip

Password: infected
sample1.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ