jeammah5_beget_tech[.]bin[.]dll

Resubmissions

22/09/2022, 16:56

220922-vfw2fsbhg610

22/09/2022, 16:47

220922-vaqbqabhf58

09/09/2022, 00:00

220909-aab4wagbf38

Sharing

Copy URL Twitter E-mail

General

Target
jeammah5_beget_tech.bin.dll
Size 2.7MB
Sample220909-aab4wagbf3
SHA256 ec3888e4031b443d7eed51bb3bd9d51207acc90cc60c49270e43724b059b7f63
MD5 252d06bd87a3287e88b25b5686820dc5
SHA1 85c2ec0d59900331c61731fec723004544ce6796
SHA512 ccec9571a08eefc7e611458635cb5aec47c8f74e914b9661002611dbb20a96a16a3442793472a7f95672353f36b215f90b658ae60184779af50fe5ac99468e0a
SSDEEP 49152:Jzl1rpbUrqvv0v2rQVt8nqwI7lOOYce2ek:P1Kqvv07noI7lOOYcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

jeammah5_beget_tech.bin.dll

.dll 2.7MB

jeammah5_beget_tech.bin.dll

IMPHASH c0d46b7ff0e53996feb53e4ba78f033e
SHA256 ec3888e4031b443d7eed51bb3bd9d51207acc90cc60c49270e43724b059b7f63
MD5 252d06bd87a3287e88b25b5686820dc5
SHA1 85c2ec0d59900331c61731fec723004544ce6796
SHA512 ccec9571a08eefc7e611458635cb5aec47c8f74e914b9661002611dbb20a96a16a3442793472a7f95672353f36b215f90b658ae60184779af50fe5ac99468e0a
SSDEEP 49152:Jzl1rpbUrqvv0v2rQVt8nqwI7lOOYce2ek:P1Kqvv07noI7lOOYcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

2216185

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle GetSystemInfo LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress LocalFree LockFileEx GetFileSize GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter HeapSize GetPrivateProfileStringA K32GetModuleFileNameExA TerminateProcess OpenProcess Process32First FindFirstFileA DeviceIoControl FindNextFileA GetVolumeInformationA GetModuleHandleA CreateToolhelp32Snapshot GlobalSize GlobalAlloc HeapReAlloc GetNativeSystemInfo GlobalLock GlobalMemoryStatusEx GlobalUnlock VirtualProtect K32GetModuleInformation CreateThread HeapValidate UnmapViewOfFile GetCurrentThreadId GetFileAttributesW CreateFileW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx DeleteFileW DeleteFileA WaitForSingleObjectEx CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA FormatMessageW SetEndOfFile GetFullPathNameA SetFilePointer InitializeCriticalSection LeaveCriticalSection LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile GetFullPathNameW EnterCriticalSection HeapFree HeapCreate TryEnterCriticalSection ReadFile AreFileApisANSI LoadLibraryA GetTickCount Sleep GetTempPathA Process32Next MultiByteToWideChar lstrcmpiW DeleteCriticalSection DecodePointer RaiseException GetLastError FlushFileBuffers WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileExW FindNextFileW GetFileInformationByHandle SetFileInformationByHandle SetFilePointerEx CopyFileW MoveFileExW GetFileInformationByHandleEx GetExitCodeThread QueryPerformanceFrequency GetStringTypeW LCMapStringEx EncodePointer GetModuleHandleW CompareStringEx GetCPInfo IsDebuggerPresent SetLastError SleepEx GetSystemDirectoryW GetEnvironmentVariableA GetStdHandle GetFileType PeekNamedPipe WaitForMultipleObjects VerSetConditionMask VerifyVersionInfoW GetFileSizeEx InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitProcess GetModuleFileNameW GetConsoleMode ReadConsoleW GetConsoleOutputCP GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation SetStdHandle IsValidCodePage GetACP GetOEMCP GetCommandLineA InitializeCriticalSectionEx

user32

ReleaseDC GetDC EnumDisplayDevicesA GetSystemMetrics GetDesktopWindow

gdi32

StretchBlt SetStretchBltMode CreateCompatibleBitmap SelectObject CreateCompatibleDC GetCurrentObject GetDIBits DeleteDC GetObjectW

advapi32

CryptAcquireContextA CryptReleaseContext CryptGenRandom CryptAcquireContextW CryptGetHashParam CryptCreateHash RegQueryValueExA CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt RegOpenKeyExA GetUserNameA RegGetValueA RegCloseKey

shell32

ShellExecuteA

ole32

GetHGlobalFromStream CoUninitialize CoCreateInstance CreateStreamOnHGlobal CoInitializeEx CoSetProxyBlanket CoInitializeSecurity CLSIDFromString

crypt32

CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CryptUnprotectData CertOpenStore CryptStringToBinaryW PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringW CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain

iphlpapi

GetAdaptersInfo

gdiplus

GdiplusStartup GdiplusShutdown GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipSaveImageToStream

urlmon

URLDownloadToFileA

ws2_32

getsockopt htons getpeername setsockopt socket WSASetLastError WSAIoctl WSAStartup WSACleanup __WSAFDIsSet select accept htonl listen getaddrinfo freeaddrinfo recvfrom sendto ioctlsocket gethostname connect bind recv WSAGetLastError closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send getsockname ntohs

wldap32

ord167 ord301 ord147 ord133 ord127 ord27 ord26 ord117 ord41 ord208 ord73 ord216 ord14 ord46 ord219 ord145 ord79 ord142