OFFICE365 CHECKER FAST PROXYLESS[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

OFFICE365 CHECKER FAST PROXYLESS.bin
Size

12.3MB
MD5

9f52957212a1b9b485fc6d92c5722db8
SHA1

fa7abe5bb5aca80538373cb9e4c7ec6e2d097a16
SHA256

06f18c05b6a52cea7751c0ee3fbec0f8977b0689f879899c04ac83c8f7612621
SHA512

52b895cd8d2fe97482831b38da0e5e81fd2fac0659d6546566547f5cf70a1083992418366d819fc9f4781b8f77cf57d3a9ad05805ea07a69c444cd6cb6728fc6
SSDEEP

196608:LfPkFVno6+uXJWIj8KkUx2R4NzHdQmR5dA6lRuErSEEJwdF6sxw1yYPU1kspt1J:LHEVFJWQsUcR4NzHdQ2lR+9JUiylHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OFFICE365 CHECKER FAST PROXYLESS.bin

Files

OFFICE365 CHECKER FAST PROXYLESS.bin
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 84KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 239KB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
becbackdoor.pyc
.ps1

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: 84KB - Virtual size: 164KB

Size: 36KB - Virtual size: 76KB

Size: 512B - Virtual size: 68KB

Size: 5KB - Virtual size: 12KB

Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 20KB

Size: 1KB - Virtual size: 4KB

.rsrc Size: 17KB - Virtual size: 20KB

Size: 239KB - Virtual size: 4.7MB

Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 17KB - Virtual size: 20KB