a2a0ce67c239385c1ec1d5d29ff91a7daf91cf2b4368dc91d84dbb598becdc5d[.]bin[.]exe

Resubmissions

02-12-2022 14:11

221202-rhnlbaed77 1

20-10-2022 20:03

221020-ysnsdscean 1

Sharing

Copy URL

Twitter E-mail

General

Target

a2a0ce67c239385c1ec1d5d29ff91a7daf91cf2b4368dc91d84dbb598becdc5d.bin.exe
Size

203KB
MD5

d5ee933f4eb7e3226b454dd2efcf2609
SHA1

8644fdc023ed3b37f121600f45a187b89dcc67b8
SHA256

a2a0ce67c239385c1ec1d5d29ff91a7daf91cf2b4368dc91d84dbb598becdc5d
SHA512

7e483cc88d703fe9ccec78feaa1c47bc98688d1917045847d709040eadffdb038aafe98624e8b71280a44b6792c2efce28893d3478cd80d7b676df9a9225e0c3
SSDEEP

6144:zXtu8+/0JWzIblasnMZZ/fuoFIRVlw5M6Z7PWW:z9u8+/0JWz/sU/f2xw5M2J

Score

N/A

Malware Config

Signatures

Files

a2a0ce67c239385c1ec1d5d29ff91a7daf91cf2b4368dc91d84dbb598becdc5d.bin.exe
.exe windows x86

dfaead406601de199c10ac625c28af71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
VirtualQueryEx
CreateFileMappingW
MapViewOfFile
VirtualProtect
SetErrorMode
OpenFileMappingW
SetFilePointer
SetEndOfFile
GetLocalTime
GlobalSize
GlobalUnlock
QueryDosDeviceW
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceExW
FindFirstFileW
FindClose
FindNextFileW
FlushFileBuffers
SetFileTime
GetFileTime
CreateDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
HeapFree
CopyFileW
lstrcpyW
QueryPerformanceFrequency
QueryPerformanceCounter
CreateNamedPipeW
ConnectNamedPipe
GetOverlappedResult
GetConsoleCP
FreeConsole
GetConsoleOutputCP
GetConsoleWindow
AllocConsole
SetConsoleCtrlHandler
SetConsoleScreenBufferSize
GetStdHandle
WriteConsoleInputW
GenerateConsoleCtrlEvent
GetConsoleMode
GetConsoleDisplayMode
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
ReadConsoleOutputW
GetSystemDirectoryW
GetWindowsDirectoryW
GetModuleFileNameW
GetModuleHandleW
RemoveDirectoryW
GetComputerNameW
ProcessIdToSessionId
ResetEvent
VirtualProtectEx
CreateThread
lstrcmpA
ExitThread
HeapReAlloc
IsProcessorFeaturePresent
RtlUnwind
HeapAlloc
GetStringTypeW
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapCreate
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LCMapStringW
SetLastError
TlsFree
DecodePointer
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
HeapSetInformation
GetCommandLineA
QueueUserAPC
HeapSize
GetQueuedCompletionStatus
GetCurrentThread
TerminateThread
CreateIoCompletionPort
LocalReAlloc
PostQueuedCompletionStatus
LocalUnlock
LocalLock
LocalFree
LocalAlloc
VirtualAllocEx
GetModuleHandleA
WriteProcessMemory
GetExitCodeThread
VirtualFree
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
GetSystemDefaultLCID
GetSystemInfo
GetSystemTime
GlobalMemoryStatus
LoadLibraryW
DisconnectNamedPipe
VirtualFreeEx
ReadProcessMemory
OpenProcess
GetVersionExW
GetCurrentThreadId
SetUnhandledExceptionFilter
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
lstrlenW
WriteFile
DeleteFileW
GetFileAttributesW
SetFileAttributesW
ReadFile
GetFileSize
CreateFileW
lstrcpyA
lstrcmpW
lstrcpynW
WaitForMultipleObjects
GetTickCount
CreateEventW
lstrcmpiW
GetCurrentProcessId
CreateProcessW
ExitProcess
GetCurrentProcess
TerminateProcess
GetLastError
CreateMutexW
GetCommandLineW
CloseHandle
WaitForSingleObject
SetEvent
GetProcAddress
LoadLibraryA
lstrcpynA
Sleep

user32

wsprintfA
wsprintfW
GetSystemMetrics
CreateWindowExW
SetClipboardViewer
SetWindowLongW
ShowWindow
SetTimer
GetMessageW
TranslateMessage
DispatchMessageW
KillTimer
SendMessageW
ChangeClipboardChain
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcW
GetForegroundWindow
PostMessageA
CloseWindowStation
SetThreadDesktop
GetThreadDesktop
OpenInputDesktop
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
keybd_event
mouse_event
SetCapture
WindowFromPoint
GetDesktopWindow
GetDC
LoadCursorW
DestroyIcon
GetIconInfo
MessageBoxW
ExitWindowsEx
GetKeyState
GetAsyncKeyState
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
CloseDesktop
CreateDesktopW
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetWindowThreadProcessId
GetClassNameW
GetWindowTextW
SetCursorPos

gdi32

CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
GdiFlush
BitBlt
GetDeviceCaps
DeleteDC
DeleteObject
GetDIBits
CreateDCW
SelectObject

advapi32

RegOpenCurrentUser
RegEnumValueA
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
GetLengthSid
LookupAccountSidW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteValueW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
ChangeServiceConfigW
StartServiceW
ControlService
QueryServiceConfig2W
QueryServiceConfigW
EnumServicesStatusExW
RegEnumKeyExW
RegCreateKeyExW
InitiateSystemShutdownA
DeleteService
QueryServiceStatusEx
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenServiceW
OpenSCManagerW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegOverridePredefKey
RevertToSelf
RegEnumValueW
ImpersonateLoggedOnUser

shell32

CommandLineToArgvW
SHFileOperationW
ExtractIconExW

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

VariantClear

odbc32

ord2
ord136
ord43
ord13
ord127
ord18
ord61
ord111
ord9
ord141
ord75
ord24
ord171
ord31
ord157

ws2_32

WSARecvFrom
closesocket
setsockopt
WSAIoctl
WSASocketA
getsockname
bind
WSASendTo
WSACleanup
WSAGetLastError
WSAStartup

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

dfaead406601de199c10ac625c28af71

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

odbc32

ws2_32

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 22KB - Virtual size: 50KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 22KB - Virtual size: 50KB

.reloc
Size: 16KB - Virtual size: 15KB