1536e9bf086982c072c2cba7d42b0a62[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

1536e9bf086982c072c2cba7d42b0a62.bin
Size

95KB
MD5

1536e9bf086982c072c2cba7d42b0a62
SHA1

38a6ac65ab2d8d03ebd9250bbc32edc598ab9d76
SHA256

d0068a7c62bafd0078829a0597fa5cca1637b28f7273ffc18f79504a9714f445
SHA512

ba8b6deddb95377ce6784ca395f112916f968c373b53b851db761a69dcb1565eea2781a3e07df894ac721c9d34f8f27a109de646818dc6ea8931fd7633c8a9db
SSDEEP

1536:cSrIDi6zQ6KVyYQM+grGL6uMg1qaT2SIkswkJCs9emLT9bIpT++vbT9plWBs:tArzQ68E4qLQgsaT+k3kJv9BLTeT+gbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1536e9bf086982c072c2cba7d42b0a62.bin

Files

1536e9bf086982c072c2cba7d42b0a62.bin
.dll windows x64

659489c7c2e0a07688572b6e20014f03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceCounter
GetLastError
lstrcatW
lstrcmpiW
lstrcpyW
CreateThread
WaitForSingleObject
lstrlenW
lstrcmpiA
OutputDebugStringA
LoadLibraryA
GetProcAddress
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetModuleHandleW
ExitProcess
RtlUnwindEx
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LoadLibraryW

user32

wsprintfW
wsprintfA

shlwapi

StrTrimW

Exports

Exports

ServiceMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

659489c7c2e0a07688572b6e20014f03

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 12KB - Virtual size: 17KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 12KB - Virtual size: 17KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1KB - Virtual size: 1KB