60f9500dae6202197a2d7b4bca948fc6[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

60f9500dae6202197a2d7b4bca948fc6.bin
Size

297KB
MD5

60f9500dae6202197a2d7b4bca948fc6
SHA1

237454e971549bce1bde64ae9913dade789e4a07
SHA256

1cf04c3e8349171d907b911bc2a23bdb544d88e2f9b8fcc516d8bcf68168aede
SHA512

32dd0ff64ac0625a332263f423129365e75b529160f0eb09011112d88874f11f63ff6587cfd97d80883307297c62991c8b41715c16ef7e7a0faa6da313a02754
SSDEEP

6144:jHX8pR0HPJfMPQ/qRTatX9i+ph193u1A0huvSFVb8XqcYte:jHsEBfEQ//RY+phe1A0USFVgXqcqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f9500dae6202197a2d7b4bca948fc6.bin

Files

60f9500dae6202197a2d7b4bca948fc6.bin
.dll windows x64

b095cf677389cb2f1b84e81909252fdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
CreateFileW
InitializeCriticalSection
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlVirtualUnwind
RtlLookupFunctionEntry
SetFilePointer
SetEndOfFile
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA

advapi32

CryptReleaseContext
CryptDecrypt
CryptAcquireContextW
CryptSetKeyParam
CryptImportKey
CryptDestroyKey

Exports

Exports

SpLsaModeInitialize

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 219KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b095cf677389cb2f1b84e81909252fdf

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 219KB - Virtual size: 227KB

.pdata Size: 3KB - Virtual size: 3KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 219KB - Virtual size: 227KB

.pdata
Size: 3KB - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB