314dd8fcd188f3507bd0113afa6c10cb[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

314dd8fcd188f3507bd0113afa6c10cb.bin
Size

317KB
MD5

ef73e2488289b1d0006783765df35a09
SHA1

c1e4120c98d7148a6aae802e2c89b80907e2c6fb
SHA256

a0b031c79efc2e3ee2f2aa183d9613386e47459ca1eff4021b4c6ea593ae07f4
SHA512

b02e4a91eb1145bb7ff9f66e5a0eb49d213806ff52278845fb2f6d4dcc250572b7be539d10f30f08c3550112a5b6d62645c73e12f0efef077fce60d83ff059c9
SSDEEP

6144:jaavCXHOOYNiRmAdBQi76q4WJexkhHdt/OD:XCXOOYgpdBQDTCAkBS

Score

1^/10

Malware Config

Signatures

Files

314dd8fcd188f3507bd0113afa6c10cb.bin
.zip

Password: infected
3c2eeb6f7925b176c3037df99473584b1621929b79a75573cfe335ff87c30e63.exe
.exe windows x64

Password: infected

5f15194ed94be02abab9e9a647ad1555

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
TraceEvent
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

kernel32

GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
FindResourceW
RegisterApplicationRestart
HeapSetInformation
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
FindResourceExW
LoadResource
SizeofResource
EnterCriticalSection
MultiByteToWideChar
LeaveCriticalSection
MulDiv
GetUserDefaultUILanguage
GetLocaleInfoW
OutputDebugStringA
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
ExpandEnvironmentStringsW
GetLastError
GetLocaleInfoEx
Sleep
SetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
lstrcmpiW
RaiseException

gdi32

CreatePen
SetBkMode
SetBkColor
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
GetDeviceCaps
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
StretchBlt
DeleteObject
DeleteDC
Rectangle
GetStockObject
SetDCPenColor
SetTextColor
CreateDIBSection
GdiAlphaBlend
GetDIBits
SetDIBits
CreateSolidBrush

user32

UnionRect
SetTimer
GetWindowRect
FillRect
LoadImageW
DrawTextW
KillTimer
UnregisterClassA
ord2560
ScreenToClient
SetForegroundWindow
MessageBoxW
PostQuitMessage
SendDlgItemMessageW
GetClientRect
CopyImage
DrawTextExW
LoadIconW
SetClassLongPtrW
SystemParametersInfoW
SetDlgItemTextW
EnableWindow
MoveWindow
SetRectEmpty
PtInRect
InflateRect
GetDlgItem
GetDC
ReleaseDC
SendMessageW
SetWindowLongPtrW
SetWindowLongW
GetParent
ShowWindow
GetSysColor
CreateWindowExW
DestroyWindow
PostMessageW
BeginPaint
IsWindowVisible
EndPaint
InvalidateRect
GetWindowLongW
OffsetRect
CopyRect
GetDlgItemTextW
SetRect
GetWindowLongPtrW
CallWindowProcW
GetPointerInfo
GetPointerInfoHistory
CharNextW
FlashWindowEx
GetCaretBlinkTime
LoadStringW
FindWindowW

msvcrt

_wcmdln
_fmode
_commode
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_errno
realloc
_lock
_initterm
__dllonexit
_onexit
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
_vsnwprintf
__CxxFrameHandler3
_CxxThrowException
atan2
memcpy
__C_specific_handler
memset
memcpy_s
wcsncpy_s
??_U@YAPEAX_K@Z
??2@YAPEAX_K@Z
malloc
_purecall
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
_unlock
sqrt
free

ntdll

WinSqmIsOptedIn
WinSqmIncrementDWORD
RtlVirtualUnwind
RtlLookupFunctionEntry
EtwTraceMessage
RtlCaptureContext

gdiplus

GdipBitmapLockBits
GdiplusShutdown
GdipBitmapUnlockBits
GdipGetImageHeight
GdipGetImageWidth
GdipImageRotateFlip
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdiplusStartup
GdipCreateBitmapFromStream

comctl32

CreatePropertySheetPageW
PropertySheetW

shlwapi

PathFileExistsW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

ole32

CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize

oleaut32

VarUI4FromStr

uxtheme

GetThemeTextExtent
GetThemeSysColorBrush
GetThemeFont
CloseThemeData
GetThemeColor
OpenThemeData
GetThemeSysColor
IsThemeActive
DrawThemeText

windowscodecs

WICCreateImagingFactory_Proxy

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 671KB - Virtual size: 671KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

5f15194ed94be02abab9e9a647ad1555

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

gdiplus

comctl32

shlwapi

shell32

ole32

oleaut32

uxtheme

windowscodecs

Sections

.text Size: 101KB - Virtual size: 100KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 3KB - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 671KB - Virtual size: 671KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 101KB - Virtual size: 100KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 3KB - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 671KB - Virtual size: 671KB

.reloc
Size: 2KB - Virtual size: 2KB