TNZRPB2F2YpS.bin.zip
- SHA256 76ce8b739bc011092d72a56445d968a9da1a53f2ea595d8a5532eea0ada95b53
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
TNZRPB2F2YpS.dll
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
- Target TNZRPB2F2YpS.bin.zip
- Size 129KB
- Sample220526-qaf1tsfebr
- SHA256 76ce8b739bc011092d72a56445d968a9da1a53f2ea595d8a5532eea0ada95b53
- MD5 b2545c192fe4c73c0f42f91953357132
- SHA1 9c3df0312120b68292f4201a69f7db8fd47e4eb7
- SHA512 f763541d422488a4168db87ca299f1188142a7619c0c7b8035ae0c0795b944205d8751d2d753a7711efbdfd359c1e8b1aa5ea0370a8d9c7120472addd4e9a7b1
- SSDEEP 3072:fDVL8y4LnZ+mdcaIT1puzsmlvz/+XkrZ5k:fDVQh7dcd1aYUrZ5k
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
TNZRPB2F2YpS.bin.zip.zip 129KB
-
TNZRPB2F2YpS.bin.dll 342KB
TNZRPB2F2YpS.bin
- IMPHASH af263152594d80bd9c18d0a70e4d94ec
- SHA256 5478e90e2d42676ac423516709111caf32a9eaecad52ccd36f82d1b9ba2e1ca3
- MD5 15916015078aacc15bc99f543df689ca
- SHA1 613c4c69f8fb1f9ce7171f7cded6e0a4de604943
- SHA512 446a19359726f8d9efbd09e836d957f036f4a64da8edc811512f15b00f0981b04fe39250fa2fea0871fa39e0a8db7f3df259e02807ed71c01381023ae09e8af2
- SSDEEP 3072:6/GZgCBD0JqvjYGRKbGUUtvAMdg6Ygpr7kL2LWsFzMFruztyr1Bg:2GSkDgqvPRKib6+g8rtLWFcEpK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b6:67:1b:de:d7:bb:71:bf:22:7c:5c:33:62:02:e5:7c:44:a2:46:28
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=FRVFMPRLNIMAMSUIMT
Serial Number
67:5f:b1:5f:a1:75:6b:65:b2:77:f2:fe:c9:86:b2:0d
Issuer
CN=FRVFMPRLNIMAMSUIMT
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 18, 2021 - Dec 31, 2039
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2020 - Jan 22, 2032
Minor OS version
Major OS version
Entry point
4208
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetLastError
LoadLibraryA
GetProcAddress
GetModuleHandleW
user32
LoadCursorA
CharUpperA
CharUpperW
gdi32
RealizePalette
AddFontResourceW
TextOutA
StartPage
StartDocA
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt
advapi32
GetUserNameA
RegOpenKeyA
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text4
Size
318KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text7
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Name
.text6
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Name
.text5
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ