fd50b51ec0532a3594b8fecd6749f85d[.]bin

General

Target
fd50b51ec0532a3594b8fecd6749f85d.bin
Size 471KB
Sample230422-ch4vzabg86
SHA256 cbd0a41aabf4875bfee746dad9811dfe342080eed878a72d112b0ba95bad6a84
MD5 6d15e878b01c999117f55741d77653e8
SHA1 ad65a2fdd459356bf5e9502b747405cbe0983061
SHA512 704b62eb827f5f6bc0604720273ed0f0979ab0e322c2466a555a764f4822415f0ef7cd397d8198f987ca57df772baab95d7a746b62b72ca6d7d28af0e1d76b64
SSDEEP 6144:zsTwGZ9FImQk0SCjW3JLP5ZtN7wef9puOHwewkybDTXWHcEp0gGzPeQyAmtlzeCH:wTfJsj+d5tJW/ewkWnhgfQetpBwdNO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

fd50b51ec0532a3594b8fecd6749f85d.bin

.zip 471KB
a628293a166a77aed452276e34d68ea8dbd2e53d5f0457a2a670d77e4e49373a.exe

.exe 969KB

fd50b51ec0532a3594b8fecd6749f85d.bin

SHA256 cbd0a41aabf4875bfee746dad9811dfe342080eed878a72d112b0ba95bad6a84
MD5 6d15e878b01c999117f55741d77653e8
SHA1 ad65a2fdd459356bf5e9502b747405cbe0983061
SHA512 704b62eb827f5f6bc0604720273ed0f0979ab0e322c2466a555a764f4822415f0ef7cd397d8198f987ca57df772baab95d7a746b62b72ca6d7d28af0e1d76b64
SSDEEP 6144:zsTwGZ9FImQk0SCjW3JLP5ZtN7wef9puOHwewkybDTXWHcEp0gGzPeQyAmtlzeCH:wTfJsj+d5tJW/ewkWnhgfQetpBwdNO
MD5 SHA1 SHA512 SSDEEP

Password

infected

a628293a166a77aed452276e34d68ea8dbd2e53d5f0457a2a670d77e4e49373a.exe

IMPHASH f0ea7b7844bbc5bfa9bb32efdcea957c
SHA256 a628293a166a77aed452276e34d68ea8dbd2e53d5f0457a2a670d77e4e49373a
MD5 fd50b51ec0532a3594b8fecd6749f85d
SHA1 04d0121062893e2204c7f5d9c2e28974d4dd5b89
SHA512 0d3f6f062f79f14fe2cff8a2b35b43d36d006e2a30a258bf7ce96f522fac7b6bffd02b0dd7a7a6b384e795566450a9172e6e43d7aa324cb9ddce192d7765dd5a
SSDEEP 12288:m4mT/RcXtvyJdBQhXVQp+Dv4alfZqby13caYgd2DKOhUeM01:m4C/6XtvWBmQp+T4gcaYgdq91
MD5 SHA1 SHA512 SSDEEP

windows x64

Password

infected

Minor OS version

Major OS version

Entry point

368896

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

403KB

Virtual Size

402KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

459KB

Virtual Size

458KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

97KB

Virtual Size

446KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

fd50b51ec0532a3594b8fecd6749f85d.bin

a628293a166a77aed452276e34d68ea8dbd2e53d5f0457a2a670d77e4e49373a.exe

kernel32