163e651162f292028ca9a8d7f1ed7340.bin
- SHA256 7e62ba5d20453f60bdda8e67caa3eb91b4b6c3cca5203d206757b4b339eb24cb
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b.exe
Resource
win7-20230220-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
10 signatures
150 seconds
General
- Target 163e651162f292028ca9a8d7f1ed7340.bin
- Size 334KB
- Sample230331-bd2z5shd6t
- SHA256 7e62ba5d20453f60bdda8e67caa3eb91b4b6c3cca5203d206757b4b339eb24cb
- MD5 ff32bdfe64b6ba3c3e21b76d978ba1f7
- SHA1 31c9964a21b67b19592652dad42bd2f14571afc1
- SHA512 54c0dbb1425263ca891cffeb378a5f9ba8baba8f67ce0864f54e12ecc3bcb7c9a9ca54aae1ccb91ab73a71cfc5e04fe9a57ea4061e98af6324b58a5c1f7eff3b
- SSDEEP 6144:qVpdyLkiFyRnGknCXS4ws3hPorz1Z4BwgIfa6aXEFahT08BzxshI/pVgMJbu9q9p:qVbyAHoXYsRgNZ4R5XwaFt3pVBoYr
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
163e651162f292028ca9a8d7f1ed7340.bin.zip 334KB
-
bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b.exe.exe 720KB
bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b.exe
- IMPHASH b4d5733390854900e9a765684837c828
- SHA256 bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b
- MD5 163e651162f292028ca9a8d7f1ed7340
- SHA1 a85ff9091f298ea2d6823a7b0053daa08b237423
- SHA512 f1cd02b07219d40d489b8000a92e20fca0c3e536a7dde25b98b7be0ce54a46349dcea9e66bef8f7fbd895ce7e5b22e3f3a46fbb9c7dcea4185b3937384f1649f
- SSDEEP 12288:A+2ZzbQ32UC1pC0q1oJn2OR9YA/SnHaetVkiIGjltRztp:A+4OECVCn2OR9r/kaetNIOtZ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Minor OS version
Major OS version
Entry point
391555
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
dbghelp
ImageNtHeader
mpr
WNetOpenEnumW
WNetCancelConnection2W
WNetAddConnection2W
WNetEnumResourceW
WNetCloseEnum
wtsapi32
WTSEnumerateSessionsW
WTSQueryUserToken
WTSFreeMemory
kernel32
SetStdHandle
GetStdHandle
GetCommandLineW
WriteFile
GetLastError
CreateMutexA
GetCurrentProcessId
GetCurrentThreadId
GetDynamicTimeZoneInformation
WideCharToMultiByte
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CloseHandle
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetFinalPathNameByHandleW
SetFileAttributesW
GetCurrentProcess
IsValidCodePage
GetProcAddress
LocalFree
GetDriveTypeW
GetCurrentThread
FormatMessageA
ExitThread
GetFileSizeEx
FlushFileBuffers
HeapReAlloc
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
CreateThread
LoadLibraryExW
FreeLibrary
GetTimeFormatW
GetACP
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileType
ReadFile
ReadConsoleW
GetConsoleOutputCP
ExitProcess
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapSize
WriteConsoleW
GetModuleFileNameW
GetCommandLineA
HeapAlloc
HeapFree
GetModuleHandleW
MultiByteToWideChar
QueryPerformanceCounter
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
TlsFree
GetStringTypeW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
SetEndOfFile
SetFileInformationByHandle
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetLocaleInfoEx
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RaiseException
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
GetDateFormatW
shell32
ShellExecuteW
ole32
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
VariantInit
SysFreeString
SysAllocString
advapi32
LookupPrivilegeValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RevertToSelf
DuplicateTokenEx
SetThreadToken
SetNamedSecurityInfoW
SetEntriesInAclW
LookupPrivilegeValueW
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges
OpenProcessToken
OpenServiceW
OpenSCManagerW
EnumDependentServicesW
ControlService
CloseServiceHandle
Name
.text
Size
551KB
Virtual Size
550KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ