12b45fb2c92413f3ccf419d947eee377[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

12b45fb2c92413f3ccf419d947eee377.bin
Size

7KB
MD5

9f63a351ce7f82d7f20c35689f61fef2
SHA1

01b7e303e1dbf9b96c0f0d1da923db259f4fb68b
SHA256

67933e7b9dcbfa20d6bb7e8a2d89b285c7d13e5c1bc8d87677810e42b252f3d4
SHA512

4df753aa30be7587b8a19cab429beb8852752e5fe6bb5da26dc15f1ed46ceeb9e08a4b88b195677f97ca2f631103562eac6012805e423f9aa20e11f04acb5d49
SSDEEP

96:Qq05hM70NKHp8vBUHHYbBFHxkA5MPV631fh00GPMaOoNUKCJiFFlT44E3Wp8dqTc:Qh8+sHYbLx52d63j00utpCWT4QBaOqv

Score

1^/10

Malware Config

Signatures

Files

12b45fb2c92413f3ccf419d947eee377.bin
.zip

Password: infected
9ab1085b5fdd3308e0fc0f59b3fbffacc2d896ba0fa078cec463feae2733cffe.exe
.exe windows x86

Password: infected

326b2e10bf6928000ed040687b6a0130

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mapi32

ord178
ord52
ord153
ord45
ord80
ord59

mswsock

EnumProtocolsA
GetNameByTypeA
GetServiceW
MigrateWinsockConfiguration
getnetbyname
sethostname

oleaut32

DispCallFunc
SafeArrayDestroyDescriptor
VarDecFromUI2

setupapi

SetupDiCreateDeviceInterfaceA
SetupDiGetDeviceInstallParamsW
SetupDiInstallDeviceInterfaces
SetupDiSetDriverInstallParamsW
SetupGetLineCountA

wsock32

WEP
WSAAsyncGetHostByName
gethostname
recv
recvfrom
setsockopt

rpcrt4

CStdStubBuffer_DebugServerQueryInterface
NdrConformantStructBufferSize
NdrConformantVaryingStructBufferSize
NdrStubForwardingFunction
RpcBindingInqAuthInfoW

odbc32

ord8
ord208
ord45
ord39

rtm

MgmReleaseInterfaceOwnership
RtmCloseEnumerationHandle
RtmDeleteRouteTable
RtmDeregisterClient
RtmIsRoute

comdlg32

ChooseFontA
FindTextW
PageSetupDlgW
PrintDlgExA

kernel32

CloseHandle
EnterCriticalSection
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetProcessHeap
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
OpenProcess
SetEvent
SetPriorityClass
VirtualProtect
lstrcmpW

user32

BeginPaint
BringWindowToTop
CascadeWindows
CheckMenuItem
CheckMenuRadioItem
DefWindowProcW
DeleteMenu
DestroyMenu
DialogBoxParamW
EndDialog
EndPaint
GetClientRect
GetCursorPos
GetDC
GetDlgItem
GetMenu
GetMenuState
GetSubMenu
GetSysColor
GetWindowLongW
GetWindowPlacement
GetWindowThreadProcessId
IsIconic
IsWindowVisible
IsZoomed
KillTimer
LoadMenuW
OpenIcon
PostMessageW
ReleaseDC
SendMessageW
SetForegroundWindow
SetMenuDefaultItem
SetRect
SetTimer
SetWindowLongW
SetWindowPos
ShowWindow
TileWindows
TrackPopupMenuEx
WinHelpW
wsprintfW

gdi32

ExtTextOutW
SetBkColor

msvcrt

_XcptFilter
__getmainargs
__p___initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_controlfp
_except_handler3
_exit
_initterm
exit
fopen
fread
fseek
ftell
malloc
memset

shell32

Shell_NotifyIconW

comctl32

ord17

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

326b2e10bf6928000ed040687b6a0130

Headers

DLL Characteristics

File Characteristics

Imports

mapi32

mswsock

oleaut32

setupapi

wsock32

rpcrt4

odbc32

rtm

comdlg32

kernel32

user32

gdi32

msvcrt

shell32

comctl32

advapi32

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 14KB

.00cfg Size: 512B - Virtual size: 8B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 14KB

.00cfg
Size: 512B - Virtual size: 8B

.reloc
Size: 1KB - Virtual size: 1KB