nitro[.]bin[.]zip | Triage

Resubmissions

27/04/2021, 15:25

210427-nlva9ev87e 8

27/04/2021, 14:03

210427-vj2ehadz4s 8

Sharing

Copy URL Twitter E-mail

General

Target

nitro.bin.zip
Size

24KB
MD5

a418d452bc1b5899c330a559d8ddc2c7
SHA1

70397565d985ef4eb9cb3579a9e298eaea9a6674
SHA256

acbe3153184397a7e789f93226ff4d8560f8b4b3a5b57281968f67d246e35cf4
SHA512

e4eed250b182020749376ad43b2f4ec850d033118587b98feda4d4ad0835ef999607fa223a31217fcfd34bff5f020b628ed6ca85e9ce9b303bfcd4cef5bcdfc3
SSDEEP

384:zjY32fAiaJKrprxJRWJhWLcx0xorOc/yzAn9axexvYpMS+twvBMU+a8Jd5iN4sY4:z0mFaJo40G/y+xAGFtwiJJLWYZeZETi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/92190c9789485a0d96bced7040080f0ae35c02898c3d31a65d50ecd659b80f09.bin

Files

nitro.bin.zip
.zip

Password: infected
92190c9789485a0d96bced7040080f0ae35c02898c3d31a65d50ecd659b80f09.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ