731812403191b60503e017d88e23b1a3[.]bin | Triage

Resubmissions

01-03-2024 15:41

240301-s46jpahe82 10

20-02-2024 02:32

240220-c1ct7sab38 10

Sharing

General

Target

731812403191b60503e017d88e23b1a3.bin
Size

4.1MB
MD5

d6e56a3c2d00e5dfd16ccad8542fa739
SHA1

90f3f7b2b44c8f837feb38b5cb14e3fa811f9ba0
SHA256

11e21fbd77f65c83f97c0c2b38c8cd394d5c96fe780188e5c94d400346b49798
SHA512

bedc520c39e7c14e91cd44add774a639a023f9cd0256ed4ec67ecb6f57a9d33c53adb54f390784744f8aba8ee19a419a251ab0215778009e0408084f92a04481
SSDEEP

98304:sAEvotORkSAwEwcgM1HmA5cUkU3nNkH5X5laFhT6Qp5amR28rfJk:Xb2Ackq5XDy6I5TFk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe

Files

731812403191b60503e017d88e23b1a3.bin
.zip

Password: infected
db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\attat\source\repos\Millenium RAT Buillder V2.8\Millenium\Millenium\obj\Release\net462\conhost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ