7788e27589063e08f99ea9c427251c31[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

7788e27589063e08f99ea9c427251c31.bin
Size

129KB
MD5

b168aede2816bd3586cf4e7ba04dc334
SHA1

3e181d2234eebc8d510d5f6080f4946622ad07e4
SHA256

6e380cc726c1843e32354203212d3999ff281dd34504f5c38c13963ae67ff0d2
SHA512

d3ec9c861cab7a4068b2e911b254cb736a809aab233e2c7d95b179ff5d9f7ebfe5b1e01acc07db8bb049e9f07e2be23b79eae261dd3190b87593afed9a064602
SSDEEP

3072:MMH/V+zDOecmPDafC0jgd9gEirJ9khouTm/AldjxXmA:5HYPprLuwsrJ9kquHldln

Score

1^/10

Malware Config

Signatures

Files

7788e27589063e08f99ea9c427251c31.bin
.zip

Password: infected
f96dec3ad40cf1a8c85dfeb037ddb67d6aa161807005d04f97c03fdf7e12cc86.exe
.exe windows x86

Password: infected

5c0ec652c968c0f9da09dab12e468adf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointW
ReleaseMutex
ReadConsoleInputW
VerifyVersionInfoW
GetCPInfoExW
CreateEventW
SetLocaleInfoA
GetProcAddress
LocalAlloc
DeleteFileA
EnumResourceTypesW
GetBinaryTypeA
SetLastError
LocalFlags
WriteProfileStringW
GetComputerNameExA
GetConsoleAliasA
WriteProfileSectionW
GetWindowsDirectoryA
SetVolumeMountPointA
GetModuleHandleW
EnumResourceLanguagesW
SetDefaultCommConfigW
EnumDateFormatsA
GetCurrentActCtx
DeleteVolumeMountPointW
GetStartupInfoW
CreateJobSet
WritePrivateProfileStringA
FoldStringA
GetShortPathNameA
FindNextFileA
EnumCalendarInfoW
CreateEventA
GetLastError
RtlCaptureContext
GetStringTypeExA
WriteConsoleInputW
SetSystemPowerState
LoadLibraryA
DecodePointer
EncodePointer
GetCommandLineW
HeapSetInformation
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
HeapFree
Sleep
RtlUnwind
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapAlloc
HeapReAlloc
WriteConsoleW
HeapSize
CloseHandle
CreateFileW

gdi32

GetBoundsRect

advapi32

GetKernelObjectSecurity

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

5c0ec652c968c0f9da09dab12e468adf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 74KB - Virtual size: 74KB

.data Size: 77KB - Virtual size: 1.3MB

.rsrc Size: 42KB - Virtual size: 42KB

.text
Size: 74KB - Virtual size: 74KB

.data
Size: 77KB - Virtual size: 1.3MB

.rsrc
Size: 42KB - Virtual size: 42KB