177a73014d3c3455d71d645c1bf32a9f[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

177a73014d3c3455d71d645c1bf32a9f.bin
Size

12KB
MD5

4af866958cd15df062c560ba039e686f
SHA1

4714ebdbc5b3d0bb7eced1b313ec75262c8e53d1
SHA256

8711a4daaf9265869cb5ff7623eb8c9d324e77223a61c92b0e7321ba7cb48d44
SHA512

4be79802916905dd552a18ea8df5934af8dcacb8aac8b598f167590f63824ec8318d5429566cdd614d7de547b5cae1b6a9d29c24b34a9681ebc308abc8e46bfe
SSDEEP

192:6ZvcpZLVfa5WKsJwZss3ZDGjn5FJxDLJ9pizy0OVyhiZzhzIsFrmtgG3Gd07dg:62Po5prZsaDQ5FbpiWE6mtJ3/7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1aae7dcfcb679f01938f1bfff990a87ccaaa9b9bed05ff85d64cdc7e925b83ef.exe

Files

177a73014d3c3455d71d645c1bf32a9f.bin
.zip

Password: infected
1aae7dcfcb679f01938f1bfff990a87ccaaa9b9bed05ff85d64cdc7e925b83ef.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\1\source\repos\SHARPIL RAT\SHARPIL RAT\obj\Release\SHARPIL RAT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ