151fb5d2362e854d6b2cf87a31fdd101[.]bin

General

Target
151fb5d2362e854d6b2cf87a31fdd101.bin
Size 221KB
Sample230504-bh331abd3w
SHA256 f9f0ab09c8804934139e987c1c186e62d5957fc495efd815322e0a8d48edaed0
MD5 4507117bdb0f7e67e737cd3662508ff9
SHA1 9556c5b223e9ee7251f5db34ecfb7a3d3ef371db
SHA512 ac65ba15672e925e24ada51b40fd722fc17b6ed4b255cfabbc4a6729683917600859661ed52339614db911bf6606ca5726ed86f47e633e3cf0b861ba8441705d
SSDEEP 6144:wjiuEFTz7z/m92Us24Q4ap2y8Z8LtQYTSgKG9Io:wGBFzn/Us2ua2pZ0TnK6Io
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe

File Explorer

151fb5d2362e854d6b2cf87a31fdd101.bin

.zip 221KB
d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe

.exe 410KB

151fb5d2362e854d6b2cf87a31fdd101.bin

SHA256 f9f0ab09c8804934139e987c1c186e62d5957fc495efd815322e0a8d48edaed0
MD5 4507117bdb0f7e67e737cd3662508ff9
SHA1 9556c5b223e9ee7251f5db34ecfb7a3d3ef371db
SHA512 ac65ba15672e925e24ada51b40fd722fc17b6ed4b255cfabbc4a6729683917600859661ed52339614db911bf6606ca5726ed86f47e633e3cf0b861ba8441705d
SSDEEP 6144:wjiuEFTz7z/m92Us24Q4ap2y8Z8LtQYTSgKG9Io:wGBFzn/Us2ua2pZ0TnK6Io
MD5 SHA1 SHA512 SSDEEP

Password

infected

d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f.exe

IMPHASH 8e1291b1baddb8fcca0899ad3cc587e8
SHA256 d668246d8d9414c778f83f8f15d2ad68849c4b736d0cf65e126ffc7a7a27377f
MD5 151fb5d2362e854d6b2cf87a31fdd101
SHA1 12e1f114ddfc567c2718a7283f09f2b5291faf88
SHA512 ca7b106393c63b202505c10695fed8330060613cf0c62a7b3dc819fd95af4464609a85e2af3cadf1314a917f65de02fbcd81a991100d67e9a1e0bfa8e885c622
SSDEEP 6144:eB/LoBCFoHjL5xRPpe31K1UyuWkHOM8gOh9qLiGPfqb:eB/cBCFoD9zxe3k1UyuWkHOdaGGPo
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

34296

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetDriveTypeW GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA EnumCalendarInfoW GetCommState InterlockedDecrement GetNamedPipeHandleStateA GetModuleHandleW GetTickCount SetProcessPriorityBoost GetEnvironmentStrings LoadLibraryW InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetFileAttributesW lstrcatA GetOverlappedResult GetVolumePathNameA FindNextVolumeMountPointW SetTapePosition GetStringTypeExA EnumSystemLocalesA GetPrivateProfileIntW GlobalUnfix ReleaseActCtx GetStdHandle GetLastError GetProcAddress BeginUpdateResourceW CreateJobSet SetComputerNameA WriteConsoleA UnhandledExceptionFilter GetConsoleScreenBufferInfo LocalAlloc RemoveDirectoryW SetThreadIdealProcessor GetModuleFileNameA FindNextFileA EnumDateFormatsA CreateMutexA FreeEnvironmentStringsW GetConsoleTitleW SetCalendarInfoA SetFileShortNameA TerminateJobObject FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak SetFilePointer WriteConsoleW FlushFileBuffers WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW HeapCreate ExitProcess WriteFile GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode CreateFileW

user32

GetMenu DefDlgProcW

Sharing