f21efcb5c2715aafd457478084db045f[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

f21efcb5c2715aafd457478084db045f.bin
Size

214KB
MD5

147e8f30bf8d9279e26d3a17e68e907c
SHA1

f10522ed894f66dc10dea2b015ea7de3c27eab41
SHA256

a6bbd4f04b719aea0a53c41904b2e439bffbf0b56608a528ee674a586ab7aaa4
SHA512

398d93bc61232655a54fdc5ba62a3f820a7018fe0dda48ec2389edb74ce5dc9854a05f4e7310aed86ff50d9e573bd5656b1d0065b3d08fe6cad9f725b5b9247c
SSDEEP

3072:W2o9yt9DCtuQCo/9krCnVyUNE29GiHX1lfsqrExaq4tqKXCBrmcPE0WvCCw83v3N:W1w9DgurrNUNRGi3Mxa3CFpUcsvl

Score

1^/10

Malware Config

Signatures

Files

f21efcb5c2715aafd457478084db045f.bin
.zip

Password: infected
cc68d405191b4c0ab00b08fd6d113e8868d62a00dc0a885210009d23785969cf.exe
.exe windows x86

Password: infected

94b862c07f0e4212c3fe2a5391e2e04f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupSeek
FreeEnvironmentStringsA
GetModuleHandleW
GetCommConfig
EnumCalendarInfoExW
VirtualFree
ConvertFiberToThread
ReadConsoleW
GetWindowsDirectoryA
EnumTimeFormatsW
EnumResourceTypesA
SetHandleCount
LoadLibraryW
GetConsoleWindow
GetVersionExW
GetFileAttributesW
EnumSystemLocalesA
InterlockedExchange
GetProfileIntA
SetThreadLocale
GetCPInfoExW
SetLastError
AddConsoleAliasW
QueryPerformanceCounter
HeapSize
BeginUpdateResourceW
RemoveDirectoryA
LoadLibraryA
LocalAlloc
OpenEventA
PostQueuedCompletionStatus
WriteProfileSectionW
FindNextChangeNotification
AddAtomA
FoldStringA
EnumDateFormatsA
GetModuleHandleA
HeapSetInformation
GetConsoleTitleW
VirtualProtect
ScrollConsoleScreenBufferA
GetShortPathNameW
DebugBreak
InterlockedCompareExchange
GetProcAddress
GetUserDefaultLCID
VirtualAlloc
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
HeapCreate
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharLowerBuffW

gdi32

GetBrushOrgEx
GetCharWidthI

advapi32

BackupEventLogA

Sections

.text
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

94b862c07f0e4212c3fe2a5391e2e04f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 219KB - Virtual size: 218KB

.data Size: 10KB - Virtual size: 440KB

.rsrc Size: 30KB - Virtual size: 29KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 219KB - Virtual size: 218KB

.data
Size: 10KB - Virtual size: 440KB

.rsrc
Size: 30KB - Virtual size: 29KB

.reloc
Size: 7KB - Virtual size: 7KB