PTT-20230703-WA07216[.]bin | Triage

Sharing

General

Target

PTT-20230703-WA07216.bin
Size

1.9MB
MD5

ccf6483abcbb488f6c182fd88c857bed
SHA1

81f343de678e238fd9d39aa2020497df2f36c96b
SHA256

fb57d4295e76a22d42f900ab381c9473998244b2517275fe66dfa7661dae6cd9
SHA512

ae8b2b51e1d43d88d974833e73d78348d1b9a1bc25bed147538a0fd0e33eea8ff194dcb6ad9779c740adee069810cf3d06d3ede8bf70808e11793ed8e66b5a15
SSDEEP

24576:6OLUInzobl1wkM0xL1PPwcDRbTUYOUvC8N06+S3LisQMO4U/:TLUInzG1FxpdbTUYOUvxV+S7isQM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PTT-20230703-WA07216.bin

Files

PTT-20230703-WA07216.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ