501[.]bin[.]zip | Triage™

General

Target
501.bin.zip
Size 707KB
Sample240303-laqstagh23
SHA256 208c3b502eb2e3031fa0714a393dbdc719437e8568f9c97c9d7d8a898fe8de5e
MD5 6ffeebd350e0d2354db5c30f1ba4b56b
SHA1 b900f3c80301f9637b39895b3772f9c67c4894bc
SHA512 e9fb895cbc5dfd73ebcab426cec8de741188b7e1bd9b7dd661d011446245d5fc34885956dcd95aa7f97575a1a8d67bfe91c46903fdded462359e9539624549f1
SSDEEP 12288:75r3dyNSzo0jw16q1AL0cFG3iKrMjAZk39Q3ftW/fjWWWjQUglPeGnXd0:FrzpU166AL0cM3iKlqO3yCWWbglx2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/501.bin

File Explorer

501.bin.zip

.zip 707KB
501.bin

.exe 753KB

501.bin.zip

SHA256 208c3b502eb2e3031fa0714a393dbdc719437e8568f9c97c9d7d8a898fe8de5e
MD5 6ffeebd350e0d2354db5c30f1ba4b56b
SHA1 b900f3c80301f9637b39895b3772f9c67c4894bc
SHA512 e9fb895cbc5dfd73ebcab426cec8de741188b7e1bd9b7dd661d011446245d5fc34885956dcd95aa7f97575a1a8d67bfe91c46903fdded462359e9539624549f1
SSDEEP 12288:75r3dyNSzo0jw16q1AL0cFG3iKrMjAZk39Q3ftW/fjWWWjQUglPeGnXd0:FrzpU166AL0cM3iKlqO3yCWWbglx2
MD5 SHA1 SHA512 SSDEEP

Password

infected

501.bin

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 17fb5605ee9c8c5d524dbdea215e32e714827f325af0361d4ced39e6fa554859
MD5 0fda14f19aaa5c3b6da87889f0b234a6
SHA1 faa316c4456548e42d7368a1ef3ae1f3c173b34b
SHA512 7fe261ae95c325065bbfd4d32a22d16d5f8f31a5efd9b73b0806fb34f2626f1a68c7a4fb6fc9d08b35060c0a41e675d87f4effa8fa130d6291d88ace0ebc3574
SSDEEP 12288:m+y5IWuWAIe40BcQxs1pMi3oMc1LM/IWuWAIe40BcQxs1pMi3oMc1LMy:mlSfrID0rxs1pMQBsfrID0rxs1pMQBO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

773590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

501.bin.zip

501.bin

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

501.bin.zip

501.bin

mscoree

dotnet