fb0deff37fe12bbc4f0c1fe21e2d15ef[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
fb0deff37fe12bbc4f0c1fe21e2d15ef.bin
Size 7.1MB
Sample230321-cgtcvaad4x
SHA256 201e514403766ce1e74673c361dab26a7386fcdf2f6971c9f3182f17b4089537
MD5 37978a7e1b40528afcd88dbc9f8dbfcc
SHA1 0d8db740aa18e6bcfdc1e33d35b4cfe031877dcb
SHA512 d31fac7aa8684302fcc5e83f6f38986d264173bcd5abc1f3b6b55f88548af9b2f16504fc77e928414c9bdcc8a73f5fcc005dd7562a8ddddc6c7873d98afabc57
SSDEEP 196608:AVa9M3BJQY08YX5jZZsLkI6SVILB9KXDD8o:caWJ9TYX5t4l6Sgsz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

fb0deff37fe12bbc4f0c1fe21e2d15ef.bin

.zip 7.1MB
ece100b8240f7eb032cb319a019eba1552ac19f563a291cf8422b1090ccf9b76.exe

.exe 7.5MB

fb0deff37fe12bbc4f0c1fe21e2d15ef.bin

SHA256 201e514403766ce1e74673c361dab26a7386fcdf2f6971c9f3182f17b4089537
MD5 37978a7e1b40528afcd88dbc9f8dbfcc
SHA1 0d8db740aa18e6bcfdc1e33d35b4cfe031877dcb
SHA512 d31fac7aa8684302fcc5e83f6f38986d264173bcd5abc1f3b6b55f88548af9b2f16504fc77e928414c9bdcc8a73f5fcc005dd7562a8ddddc6c7873d98afabc57
SSDEEP 196608:AVa9M3BJQY08YX5jZZsLkI6SVILB9KXDD8o:caWJ9TYX5t4l6Sgsz
MD5 SHA1 SHA512 SSDEEP

Password

infected

ece100b8240f7eb032cb319a019eba1552ac19f563a291cf8422b1090ccf9b76.exe

IMPHASH f0e8db307701582115b12426e04e3928
SHA256 ece100b8240f7eb032cb319a019eba1552ac19f563a291cf8422b1090ccf9b76
MD5 fb0deff37fe12bbc4f0c1fe21e2d15ef
SHA1 180325b8b6e64638e167601c67cd9c53331ba9f6
SHA512 9fc013111994e943fd800abeb543563713eebebcd940b28973809a40d85271f0ed781dd95ca508e55788de2e2a575b1cb8734636f15b51a9d68f773b2cb4e73d
SSDEEP 196608:bdj1WcTeKCVpVAKegYv6Pvz7xCVfQeYDprOtpN6x1Cd:RReKaAlRgxMfvihOwxy
MD5 SHA1 SHA512 SSDEEP

windows x86

Password

infected

Minor OS version

Major OS version

Entry point

7596444

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeviceIoControl CreateToolhelp32Snapshot GetTickCount64 Process32NextW CreateFileA Process32FirstW CloseHandle GetSystemInfo GetProcAddress GlobalMemoryStatusEx GetModuleFileNameA IsDebuggerPresent GetComputerNameA Sleep CreateDirectoryA WriteConsoleW HeapSize CreateFileW GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GlobalUnlock GlobalLock GlobalFree GetModuleHandleW GlobalAlloc GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose MultiByteToWideChar WideCharToMultiByte LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapReAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapFree GetFileSizeEx SetFilePointerEx GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapAlloc ReadFile ReadConsoleW SetEndOfFile GetSystemTimeAsFileTime GetModuleHandleA CreateEventA GetModuleFileNameW TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree LocalAlloc LocalFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetModuleHandleW LoadResource MultiByteToWideChar FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers WriteConsoleW SetStdHandle IsProcessorFeaturePresent DecodePointer GetCommandLineA RaiseException HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc LCMapStringW GetStringTypeW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter HeapSize WriteFile RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc VirtualQuery LocalAlloc LocalFree GetModuleFileNameW ExitProcess LoadLibraryA GetModuleHandleA GetProcAddress

user32

EmptyClipboard GetClipboardData OpenClipboard CloseClipboard SetClipboardData CharUpperBuffW

advapi32

RegSetValueExA RegOpenKeyExW GetUserNameA RegCloseKey

shell32

ShellExecuteA SHGetFolderPathA

wininet

InternetCloseHandle HttpOpenRequestA InternetOpenA HttpSendRequestW InternetConnectA InternetReadFile

Name

.text

Size

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.PB

Size

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.o)=

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.$w^

Size

7.0MB

Virtual Size

7.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

475KB

Virtual Size

475KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ