cbb086e190c77d3cc7b770b4d7f206fb13fede1de60fac6e0e4c6e744441826d[.]bin

General

Target
cbb086e190c77d3cc7b770b4d7f206fb13fede1de60fac6e0e4c6e744441826d.bin
Size 417KB
Sample230501-w16xtscg68
SHA256 cbb086e190c77d3cc7b770b4d7f206fb13fede1de60fac6e0e4c6e744441826d
MD5 0ae44facdaaf7d2662764ab11bbc55a9
SHA1 2989f9ae32971ea1952bc0c92ba4380cbe17ffbf
SHA512 a6e8b551e18643be05361eb2b08d2a4bc4aa58fcaa24e17fc825b05e456ceffcd1773a7e8cd8cce289939d3b1638ffcc00fcc702fe8e5992514806d8b622c3d1
SSDEEP 6144:+zBapzqMQUAAFBXLT9YZLXmA7gvcb4TV:+zUpzqMRRB7T9eL2sP8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbb086e190c77d3cc7b770b4d7f206fb13fede1de60fac6e0e4c6e744441826d.bin

File Explorer

cbb086e190c77d3cc7b770b4d7f206fb13fede1de60fac6e0e4c6e744441826d.bin

.exe 417KB

cbb086e190c77d3cc7b770b4d7f206fb13fede1de60fac6e0e4c6e744441826d.bin

IMPHASH 10ab34837ef60af1edc59a7f73704998
SHA256 cbb086e190c77d3cc7b770b4d7f206fb13fede1de60fac6e0e4c6e744441826d
MD5 0ae44facdaaf7d2662764ab11bbc55a9
SHA1 2989f9ae32971ea1952bc0c92ba4380cbe17ffbf
SHA512 a6e8b551e18643be05361eb2b08d2a4bc4aa58fcaa24e17fc825b05e456ceffcd1773a7e8cd8cce289939d3b1638ffcc00fcc702fe8e5992514806d8b622c3d1
SSDEEP 6144:+zBapzqMQUAAFBXLT9YZLXmA7gvcb4TV:+zUpzqMRRB7T9eL2sP8
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34040

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetStringTypeA GetDriveTypeW lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA EnumCalendarInfoW GetCommState InterlockedDecrement GetNamedPipeHandleStateA MoveFileWithProgressA GetModuleHandleW GetTickCount EnumResourceTypesA SetProcessPriorityBoost GetEnvironmentStrings LoadLibraryW GetConsoleWindow InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetFileAttributesW lstrcatA GetBinaryTypeW GetOverlappedResult GetVolumePathNameA FindNextVolumeMountPointW SetTapePosition GetStringTypeExA EnumSystemLocalesA GetPrivateProfileIntW GlobalUnfix ReleaseActCtx GetLastError GetProcAddress CreateJobSet SetComputerNameA WriteConsoleA UnhandledExceptionFilter GetConsoleScreenBufferInfo LocalAlloc RemoveDirectoryW BeginUpdateResourceA SetThreadIdealProcessor GetModuleFileNameA FindNextFileA EnumDateFormatsA CreateMutexA FreeEnvironmentStringsW GetConsoleTitleW GetCPInfoExA SetCalendarInfoA SetFileShortNameA TerminateJobObject FindAtomW QueryDepthSList DebugBreak DeleteFileA SetFilePointer WriteConsoleW FlushFileBuffers WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode CreateFileW

user32

DefDlgProcA GetMenu

Sharing