ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1[.]bin

General

Target
ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1.bin
Size 285KB
Sample230501-w1etcacf85
SHA256 ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1
MD5 5153d11ef0248afbacc997d075ae6d06
SHA1 f606a58ffda5e1109b9b1327252e3b5b953077f1
SHA512 f67cd8a5cae93e3537e5cfe4f83fc86279fc074bc0c8f2209c3fb285ef4bdc04acd6979dc408cbaa46be0212d825199795f0801a9d8be282fb4d67b5c6c67ac5
SSDEEP 6144:U5JqcFWo41CyHlQoO5JEDYgkN39tQqlykT:eJlwvCyHlQ5uud9tQqoM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1.bin

File Explorer

ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1.bin

.exe 285KB

ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1.bin

IMPHASH 2bb96128a9c5a88b5545cc9c23fd1150
SHA256 ca4915bfa5ef05cfa1e20ab04d46ec00a5a07e9222faac1558c1cc08e18db4b1
MD5 5153d11ef0248afbacc997d075ae6d06
SHA1 f606a58ffda5e1109b9b1327252e3b5b953077f1
SHA512 f67cd8a5cae93e3537e5cfe4f83fc86279fc074bc0c8f2209c3fb285ef4bdc04acd6979dc408cbaa46be0212d825199795f0801a9d8be282fb4d67b5c6c67ac5
SSDEEP 6144:U5JqcFWo41CyHlQoO5JEDYgkN39tQqlykT:eJlwvCyHlQ5uud9tQqoM
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19563

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleA ScrollConsoleScreenBufferW SetHandleInformation WaitForSingleObject BackupSeek GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsW TzSpecificLocalTimeToSystemTime SetProcessPriorityBoost FindResourceExA GetCalendarInfoA IsBadCodePtr FindNextVolumeW GetConsoleAliasW lstrlenW GlobalUnlock GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW WriteProfileSectionA GetConsoleDisplayMode LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA GetNumberFormatW AddAtomW RemoveDirectoryW GetDiskFreeSpaceA EnumResourceTypesW GetOEMCP GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetShortPathNameW TlsAlloc FileTimeToLocalFileTime DeleteTimerQueueTimer AddConsoleAliasA DebugBreak GetModuleHandleA lstrlenA EnumResourceNamesW SetThreadPriorityBoost GetComputerNameA RtlUnwind MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc RaiseException LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount

user32

CharLowerBuffW GetWindowLongW GetSysColorBrush SetCaretPos

gdi32

GetColorAdjustment GetCharABCWidthsW GetCharWidthW

ole32

OleQueryLinkFromData

Sharing