KSA-PDA_17122023[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KSA-PDA_17122023.bin
Size

723KB
MD5

3dff19e34ed9a7f7ccc7d64000884890
SHA1

70260264fa675af06d320ed289e8513d4a0d3344
SHA256

fccac8700366b9cf48eafc5c012a1616534d26fc6501d4014e56a0619d5d0db4
SHA512

85f740d25c5a5089e1f8e284766800a781c3b371499dda3c525d09613d6a92c08c6b1ae93297c70c8525ef03a7954c1e286443c2162cb0a04af685e68f4059ae
SSDEEP

6144:152RKZ/DhvC7+a0Yu4GLtf0uGizuwhZfaq0Re1K9XoiNZKspgeJNwkKTZlrzV0UX:152R7XCGiiZqoeoNNgI36vrB0gGwJjl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KSA-PDA_17122023.bin

Files

KSA-PDA_17122023.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

osIBk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ