2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf[.]bin

General

Target
2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf.bin
Size 278KB
Sample230501-s8prqsah56
SHA256 2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf
MD5 81d4b5e6643365732d35fab75d24b058
SHA1 a7161dd19a31d3bd5770ec518cd59d4de19983c6
SHA512 05267d2523ff70e9c3ff7ed91672ed940087f8724e5a4cb6ce6c0140fdc567f3938320e521bae20963f71201a44db92ad627a1205eb69a662f6c12544ac26ed5
SSDEEP 6144:S79Lf9LYCemcHQNlwmqOKMmzQzbZNXHav:S79zdAyhqny/XHe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf.bin

File Explorer

2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf.bin

.exe 278KB

2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf.bin

IMPHASH 2c9652108acbb09b2503bc40d7323b73
SHA256 2bbc4f8f611a0b679159f7220648cca990635e9b1d9aff175bc586985dc8dcbf
MD5 81d4b5e6643365732d35fab75d24b058
SHA1 a7161dd19a31d3bd5770ec518cd59d4de19983c6
SHA512 05267d2523ff70e9c3ff7ed91672ed940087f8724e5a4cb6ce6c0140fdc567f3938320e521bae20963f71201a44db92ad627a1205eb69a662f6c12544ac26ed5
SSDEEP 6144:S79Lf9LYCemcHQNlwmqOKMmzQzbZNXHav:S79zdAyhqny/XHe
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19567

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SystemTimeToFileTime ReadConsoleA InterlockedDecrement ScrollConsoleScreenBufferW SetHandleInformation WaitForSingleObject BackupSeek GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsW TzSpecificLocalTimeToSystemTime SetProcessPriorityBoost FindResourceExA GetCalendarInfoA IsBadCodePtr FindNextVolumeW GetConsoleAliasW GlobalUnlock GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW GetConsoleDisplayMode SetThreadPriorityBoost LoadLibraryA WriteConsoleA LocalAlloc WritePrivateProfileStringA GetNumberFormatW RemoveDirectoryW GetDiskFreeSpaceA AddAtomA EnumResourceTypesW GetOEMCP GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetShortPathNameW TlsAlloc DeleteTimerQueueTimer AddConsoleAliasA DebugBreak GetModuleHandleA lstrlenA EnumResourceNamesW WriteProfileSectionA GetComputerNameA RaiseException MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetCPInfo InterlockedIncrement GetACP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind

user32

CharLowerBuffW GetWindowLongW GetSysColorBrush SetCaretPos

gdi32

GetColorAdjustment GetCharABCWidthsW GetCharWidthW

ole32

OleQueryLinkFromData

Sharing