37f8a5b5d9dbc7759a77ec351a73d4a8[.]bin

General

Target

37f8a5b5d9dbc7759a77ec351a73d4a8.bin
Size

162KB
MD5

6cc44e2ae8a49298ea4fa7a1826148f7
SHA1

047e1cd1888d90a24f2dd0165f153928819a6ac5
SHA256

12671a878abebcc699fe9d84facaa49d698b026da5d4646fc944576557032086
SHA512

e4c0813da066b6d54112d448b604b0d7a769f45dec83eece2de0bcf20ba7ff54b256d859cec691b09449399b1f3b4fd8aa617a33653664b82b6cdf0a2fb8d87f
SSDEEP

3072:OY9eH8HwsCDI7TNE/VH1PxYpN8MUioET5dXmJLO8rTj2FHWWTklp8:5jrCUJcVH1W/8MxoET50O8rv826

Score

1^/10

Malware Config

Signatures

Files

37f8a5b5d9dbc7759a77ec351a73d4a8.bin
.zip

Password: infected
491fdf6941f894f71352b376c33e5eebaa79ccb1a0335338bffd52f457b1f796.exe
.exe windows x86

Password: infected

60e548caf08a49b383f95d28d5b1adf4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
AddAtomW
GetModuleHandleA
GetProcAddress
RtlUnwind
GetCommandLineA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
SetUnhandledExceptionFilter
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

comdlg32

ChooseFontW
PrintDlgW

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

60e548caf08a49b383f95d28d5b1adf4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 258KB - Virtual size: 261KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 258KB - Virtual size: 261KB

.rsrc
Size: 68KB - Virtual size: 67KB