Optimizer[.]bin[.]zip | Triage

Sharing

General

Target

Optimizer.bin.zip
Size

2.1MB
MD5

83d476fdaf07c36512904dfef85cd72a
SHA1

a16b996dbde2c26aca196456f6c49630623a7f7c
SHA256

928c5e0dc9e11046ba4b6259967cd5d8da5f98a1f09de37cfe576cce5d5a404f
SHA512

4d128c6b73e98c73a7b70749b0d1c948241c5529f4aae583f3470d74f5f8ca319bd36b555677a523dfe7534d1ca08c7843d866abb494a67854abfbdb3ad19d15
SSDEEP

49152:l3vtm66hZdDwCliWGTZeY1DzPjstQFiIEDWPLdqZ4AlNNPkS:X/6hHD7lQVlPjsIiRWPLdI9lNNcS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Optimizer.bin

Files

Optimizer.bin.zip
.zip

Password: infected
Optimizer.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ