ae5d92ef69074050a822f6669fe267b6[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

ae5d92ef69074050a822f6669fe267b6.bin
Size

157KB
MD5

ae5d92ef69074050a822f6669fe267b6
SHA1

22532a8c8594cd8a3294e68ceb56accf37a613b3
SHA256

d9eec27bf827669cf13bfdb7be3fdb0fdf05a26d5b74adecaf2f0a48105ae934
SHA512

7264cad7a6044a55335ed9c9a50054a9303e45da50bd2873498f8fd065a8faa56e52490e4143aa77a46a57f13bef31549d7bb5041e90cb56dbaf8807b8cbb18f
SSDEEP

3072:8reVv9GIsJyLEjpUmLgAP3OY3UyloycT28SaPKeZVzZdZ6sAF:8G9PsJYupUcJr9l3sKe/Z7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae5d92ef69074050a822f6669fe267b6.bin

Files

ae5d92ef69074050a822f6669fe267b6.bin
.dll windows x86

9bd53ebd1e9cb74feba5a6edbcc110f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
CloseHandle
Sleep
DeleteFileW
GetVersionExW
CreateFileW
GetSystemDirectoryW
GlobalLock
GlobalUnlock
WideCharToMultiByte
SetFilePointer
WriteFile
FindFirstFileW
GetCurrentDirectoryW
WaitForSingleObject
FindClose
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
GetLastError
GetFileSizeEx
ReadFile
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
GetConsoleMode
GetConsoleCP
CreateThread
CreateDirectoryW
GetModuleFileNameW
FindNextFileW
GetModuleHandleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
HeapSize
GetProcAddress
ExitProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
RtlUnwind
LCMapStringW
FlushFileBuffers

user32

CloseClipboard
GetClipboardData
OpenClipboard
wsprintfW

advapi32

RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey

shell32

DragQueryFileW

shlwapi

PathFileExistsW
PathFindFileNameW

Exports

Exports

ModuleStart
ModuleStart64

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bd53ebd1e9cb74feba5a6edbcc110f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 126KB - Virtual size: 125KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 126KB - Virtual size: 125KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 6KB - Virtual size: 5KB