2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68.bin
Size 278KB
Sample230501-s8f5lace71
SHA256 2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68
MD5 6a933a4a98e92fb8498243936f9cf0cf
SHA1 dcf6034abd763d9207c313c516e56ddc6f6468bd
SHA512 67c8f2ebf66404745b53ef18c0383c4e103ae83984d6f1f2b762be624f796a27dfe1bbf3230adaaaf11e9026595b30863eef423a4fcf410ed52086ce711ae9b2
SSDEEP 3072:OWs3VdLYkqSf1UKKKbzU6acMNWeDqXBUYydGTTupSXJPvsNb6Ux45KXaj:u3jqS7bOdWe+XBHy4apkJPvsNB3Xa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68.bin

File Explorer

2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68.bin

.exe 278KB

2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68.bin

IMPHASH 958f32b2db4437f7a0509a6814224698
SHA256 2b535c2d6700f17b16df4b917755f339277f007bcac1b78ee3b93d4ed6005c68
MD5 6a933a4a98e92fb8498243936f9cf0cf
SHA1 dcf6034abd763d9207c313c516e56ddc6f6468bd
SHA512 67c8f2ebf66404745b53ef18c0383c4e103ae83984d6f1f2b762be624f796a27dfe1bbf3230adaaaf11e9026595b30863eef423a4fcf410ed52086ce711ae9b2
SSDEEP 3072:OWs3VdLYkqSf1UKKKbzU6acMNWeDqXBUYydGTTupSXJPvsNb6Ux45KXaj:u3jqS7bOdWe+XBHy4apkJPvsNB3Xa
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18289

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA QueryDosDeviceA WaitForSingleObject GetComputerNameW BackupSeek _lclose GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesA GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW SetProcessPriorityBoost FindResourceExA GetCalendarInfoA GetSystemWindowsDirectoryA FindNextVolumeW WriteConsoleW GetModuleFileNameW GetConsoleFontSize lstrlenW IsBadStringPtrA GlobalUnlock GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize ReadConsoleA WriteProfileSectionA RemoveDirectoryA SetComputerNameA _hwrite SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA GetNumberFormatW AddAtomW GetDiskFreeSpaceA EnumResourceTypesW GetOEMCP SetConsoleCursorInfo GetConsoleTitleW VirtualProtect GetShortPathNameW FindAtomW FileTimeToLocalFileTime DeleteTimerQueueTimer AddConsoleAliasA DebugBreak SuspendThread InitializeCriticalSectionAndSpinCount EnumResourceNamesW GetDefaultCommConfigW lstrlenA FindResourceA BeginUpdateResourceW MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharLowerBuffW GetWindowLongW GetSysColorBrush SetCaretPos

gdi32

GetCharWidthW CreateHalftonePalette GetCharABCWidthsW

advapi32

CloseEventLog

ole32

OleQueryCreateFromData