netbinary[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

netbinary.zip
Size

8.1MB
MD5

a69aa99f2cc787646a07b14f99833cd0
SHA1

552c764b497136f4886ff91057f7e90aeef25d66
SHA256

1fa66485b2072b88407789f1be8a3fe3e9e19334803df7a85abfbece1a988cf9
SHA512

79abe8abce8940fc15816ec6fbbe99cefaab102dde83cc4fe250d6256133d60f47d7a8c5abc51485a5762a1deb83bd6dc67d9fa2f5486148f0dedfe5c8b8bbe4
SSDEEP

196608:Hd10eYinLtHj52Q7BN59D1zpg792mrL1KAAMsb:we1Li4DTgJNLdE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8cf212ff24c9d08d848b8d63a931a15c0d0b032acac90cba564e4ee5e160aec4

Files

netbinary.zip
.zip

Password: infected
8cf212ff24c9d08d848b8d63a931a15c0d0b032acac90cba564e4ee5e160aec4
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 15.9MB - Virtual size: 15.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ