f912d133d6132ea163bff72ab484f11c.bin
- SHA256 3574a53de8aa43d20bd702e0738a5aaf70452c241af9a7bfc6d747da096bc3dc
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe
Resource
win7-20221111-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target f912d133d6132ea163bff72ab484f11c.bin
- Size 307KB
- Sample230206-nbtbfadf46
- SHA256 3574a53de8aa43d20bd702e0738a5aaf70452c241af9a7bfc6d747da096bc3dc
- MD5 9272e9cd8653c1c44d4457f0fa2ed72f
- SHA1 274257ac0af9d918a43173830a0df5144e0bde7c
- SHA512 8f6a5716c72c0eafa3ea03db84d7e1fead2079ecc23d431c5a925178cc659a925ff75f5a63060812b352781599d3a47d3a6f7d87c98cf75c9c23ffed69a4a37c
- SSDEEP 6144:jIkUMbi8PZIsnkJYBQBRJOV3ICDZU8m8CXMIYl+PBYtdyu0:EkUMu8PZbf6B3OCO+8l+5uyv
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
f912d133d6132ea163bff72ab484f11c.bin.zip 307KB
-
c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe.exe 425KB
c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61.exe
- IMPHASH 979c588e74c8acd477d60f59f755fbec
- SHA256 c3bc3e8b2938e6df87e0793a9c89f72edbdf41a4c39bcc1646fb29aa716c5c61
- MD5 f912d133d6132ea163bff72ab484f11c
- SHA1 e1326fd027eb920e93253cc1c682af00df092a1a
- SHA512 375ef264bc8626456fbaa87653994295dc1fd3d955136649d154f2d1ead1a0735cc743b96e0e4cd2dc6d60d9041292608a1b8423325aa311166738452cc5076e
- SSDEEP 6144:fIFULM4lS9t8u9+HAndTOcFii5sHPvrZm69/CJTk637eQfnd5gWB:fIFUI4s9GQKSfyrs69CJb7d5g
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Minor OS version
Major OS version
Entry point
19534
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FindResourceExW
BuildCommDCBAndTimeoutsA
EndUpdateResourceW
GetCommState
ReadConsoleA
GetCurrentProcess
QueryDosDeviceA
SetHandleInformation
GetComputerNameW
GetGeoInfoW
SetProcessPriorityBoost
GlobalAlloc
EnumResourceLanguagesA
LCMapStringA
InterlockedExchange
GetCPInfoExW
GetLastError
SetLastError
lstrcpynA
VirtualAlloc
EnumSystemCodePagesW
SetTimerQueueTimer
LoadLibraryA
WriteConsoleA
AddAtomW
GetCommMask
FoldStringW
FoldStringA
GetModuleHandleA
BuildCommDCBA
GetConsoleCursorInfo
ReadConsoleInputW
TerminateJobObject
GetWindowsDirectoryW
GetTempPathA
GlobalReAlloc
IsBadStringPtrW
WriteConsoleOutputCharacterW
GetProcAddress
GetDateFormatW
LCMapStringW
GetStartupInfoW
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
user32
LoadMenuA
GetListBoxInfo
gdi32
GetTextExtentExPointA
advapi32
ReportEventW
ole32
ReadClassStm
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
191KB
Virtual Size
283KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.goteh
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.caci
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
162KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ