108b6b171d8799614a35aea8e1b9f67c[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

108b6b171d8799614a35aea8e1b9f67c.bin
Size

679KB
MD5

ea80372ec9edb12b1c67d858fc117c00
SHA1

5c6c2b2d95da92b29743c5f0a4a083f31a8777c2
SHA256

bef8789ac84984f439f681986d651f92bcb2da7c92b0acdf49e7f4d920520634
SHA512

43c6a608ecf628cb910953f9a47aa5983e611f1340c05e58d6edd7e9eef960a74bfa249fb6b50667c8c2eda6c7ac3000283a9a335cb9d3a6cbb955af87a7ba47
SSDEEP

12288:ZPVYDI5W7/581/8bzkhC9tg+NYRKg/mCbyJXsK28sj5ml97JlO8mKne+Pc4:ZPPa53p3hNYRPmCbyZs/d4728mKDk4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7d7c7d4b8bc8e8ddc5b91f63ea08816bde55ff83359437fdb0e924bcecff6665.exe

Files

108b6b171d8799614a35aea8e1b9f67c.bin
.zip

Password: infected
7d7c7d4b8bc8e8ddc5b91f63ea08816bde55ff83359437fdb0e924bcecff6665.exe
.dll windows x64

Password: infected

6e5b4470bb07363e7246d3742da10555

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetThreadLocale
FlushProcessWriteBuffers
GetACP
SetFileApisToOEM
GetCommandLineA
GetErrorMode
TlsAlloc
GetCurrentProcessorNumber
GetSystemDefaultLangID
GetEnvironmentStringsW
SwitchToThread
GetLargePageMinimum
GetLastError
GetOEMCP
GetTickCount
GetLogicalDrives
IsSystemResumeAutomatic
AreFileApisANSI
GetCurrentThreadId
VirtualAlloc
IsDebuggerPresent
GetSystemDefaultUILanguage
UnregisterApplicationRestart
UnregisterApplicationRecoveryCallback
GetCommandLineW
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
GetCurrentThread
FindResourceW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetProcessHeap
GetCurrentProcess
CloseHandle
ReadFile
FindClose
GetTickCount64
SizeofResource
LoadLibraryA
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
RtlUnwind

user32

GetCapture
GetDialogBaseUnits
CreateMenu
GetActiveWindow
InSendMessage
GetClipboardViewer
AnyPopup
IsWow64Message
IsProcessDPIAware
GetKBCodePage
SetProcessDPIAware
GetForegroundWindow
GetFocus
GetMessageTime
DestroyCaret
GetOpenClipboardWindow
GetMenuCheckMarkDimensions
GetCursor
EmptyClipboard
SetCursor
LoadCursorW
CharNextW
GetDesktopWindow
GetShellWindow

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

shell32

InitNetworkAddressControl

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
OleUninitialize

oleaut32

VarUI4FromStr

winmm

waveInOpen

wininet

InternetQueryDataAvailable

Exports

Exports

DllMain
djtyioi
dtwgoqhemzchznj
dyiqxmpxa
fatelbnjm
fmbbjgfptn
fqcrdrtarjnzcai
gxmzqynrcte
ifjctmofw
ifxzfoiylbxmngv
imnvppf
jgyphykxaumxz
jmlgcwfon
lbfypacrarjnq
lguiftgl
myftlgvhpsvdbok
naaqoqxpjotiiqwhs
niogvlwjydcgxz
oietygg
oozzdjueisnlfeydd
ozyodqdmcgyeisx
pbujztvfdoddugb
qqjibplzbfuve
qqjxssuamv
qvnnitfswtlkc
rzbzbksqtryikt
sbarssbtvufyxtw
tamqrmcyinoj
tiejrhauwruezprln
uibunmvfyn
veofilvfzktfi
vyffngxymyekpl
wywwbxpjkzqyqlnj
zniqxyzdisilcuhmc

Sections

.text
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

6e5b4470bb07363e7246d3742da10555

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

winmm

wininet

Exports

Exports

Sections

.text Size: 387KB - Virtual size: 386KB

.rdata Size: 611KB - Virtual size: 611KB

.data Size: 24KB - Virtual size: 30KB

.pdata Size: 11KB - Virtual size: 11KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 387KB - Virtual size: 386KB

.rdata
Size: 611KB - Virtual size: 611KB

.data
Size: 24KB - Virtual size: 30KB

.pdata
Size: 11KB - Virtual size: 11KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 2KB