Optimizer[.]bin[.]zip

General

Target
Optimizer.bin.zip
Size 2.1MB
Sample240211-pmkdcaga4y
SHA256 928c5e0dc9e11046ba4b6259967cd5d8da5f98a1f09de37cfe576cce5d5a404f
MD5 83d476fdaf07c36512904dfef85cd72a
SHA1 a16b996dbde2c26aca196456f6c49630623a7f7c
SHA512 4d128c6b73e98c73a7b70749b0d1c948241c5529f4aae583f3470d74f5f8ca319bd36b555677a523dfe7534d1ca08c7843d866abb494a67854abfbdb3ad19d15
SSDEEP 49152:l3vtm66hZdDwCliWGTZeY1DzPjstQFiIEDWPLdqZ4AlNNPkS:X/6hHD7lQVlPjsIiRWPLdI9lNNcS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Optimizer.bin

File Explorer

Optimizer.bin.zip

.zip 2.1MB
Optimizer.bin

.exe 2.8MB

Optimizer.bin.zip

SHA256 928c5e0dc9e11046ba4b6259967cd5d8da5f98a1f09de37cfe576cce5d5a404f
MD5 83d476fdaf07c36512904dfef85cd72a
SHA1 a16b996dbde2c26aca196456f6c49630623a7f7c
SHA512 4d128c6b73e98c73a7b70749b0d1c948241c5529f4aae583f3470d74f5f8ca319bd36b555677a523dfe7534d1ca08c7843d866abb494a67854abfbdb3ad19d15
SSDEEP 49152:l3vtm66hZdDwCliWGTZeY1DzPjstQFiIEDWPLdqZ4AlNNPkS:X/6hHD7lQVlPjsIiRWPLdI9lNNcS
MD5 SHA1 SHA512 SSDEEP

Password

infected

Optimizer.bin

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 576580f04d1a7d513d74ab89ca48997572015fb2e387d97a7f60bee5f39e1cde
MD5 2dabc4b4beeb7486675fbdbb8c178031
SHA1 cdb7d35266e1cc86614e1ad3b24dd4b2e6b47455
SHA512 1ed12bbd1a65716a5f3cac534fbd6e32f450fc8c122def5e7b754adf4ee26dc82af9c2a62a7524aea65061c4cc7de0dc2ff268f8b7e23d074d96389288cf4b14
SSDEEP 49152:MJO7hzfqElu0wHrrxGDCBSk/cxud+LBSzP5NDRPaSYKggZSGkK:MJO7h2EpwHrge3c8pNDRCSYyJk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2725006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Optimizer.bin.zip

Optimizer.bin

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Optimizer.bin.zip

Optimizer.bin

mscoree

dotnet