b4c89f519625821ad10099d181949be4[.]bin

General

Target
b4c89f519625821ad10099d181949be4.bin
Size 226KB
Sample230701-b2q8jsfc57
SHA256 82f925cdbc4e80afe800f7e29f86866a9d975b5b3316927618aa66c61bf63e89
MD5 e3485f337c243463a37e78adda1b7c39
SHA1 923210c74ef614eb0705c6cad1457a1085ec3598
SHA512 3cb03e6c50f1de5a081d7788652becfda803b475c50fe39635972f739dbf4ec1517853c91d5ad561764c067ab04e8ec5c268153e209639a64a6309f306ac4430
SSDEEP 6144:CO6UHNCku0i1WsOwuNUBnZ4X4sJq93rM9:RIrBWsOw8UBZ490a9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/60eb185181f8b9a4e1d5d5dca23314a8c1cc7c20b9fb885b897709cab8b896d4.exe

File Explorer

b4c89f519625821ad10099d181949be4.bin

.zip 226KB
60eb185181f8b9a4e1d5d5dca23314a8c1cc7c20b9fb885b897709cab8b896d4.exe

.exe 355KB

b4c89f519625821ad10099d181949be4.bin

SHA256 82f925cdbc4e80afe800f7e29f86866a9d975b5b3316927618aa66c61bf63e89
MD5 e3485f337c243463a37e78adda1b7c39
SHA1 923210c74ef614eb0705c6cad1457a1085ec3598
SHA512 3cb03e6c50f1de5a081d7788652becfda803b475c50fe39635972f739dbf4ec1517853c91d5ad561764c067ab04e8ec5c268153e209639a64a6309f306ac4430
SSDEEP 6144:CO6UHNCku0i1WsOwuNUBnZ4X4sJq93rM9:RIrBWsOw8UBZ490a9
MD5 SHA1 SHA512 SSDEEP

Password

infected

60eb185181f8b9a4e1d5d5dca23314a8c1cc7c20b9fb885b897709cab8b896d4.exe

IMPHASH 0a5db6363a2820d393575c77f8ba89bb
SHA256 60eb185181f8b9a4e1d5d5dca23314a8c1cc7c20b9fb885b897709cab8b896d4
MD5 b4c89f519625821ad10099d181949be4
SHA1 a296d2869d4a01448d30610ea4894f6af980975b
SHA512 12d1d47554ab030ceeb69d6efc4c4ec0ccbbe2aef20a6a215135937699d5233bd07608a1362edcd4455fc76ef12fbe6cbc0a031f0a6cd4c29434e128100abb62
SSDEEP 6144:2TQHKtSp2oH0c65+qvTh91d/+z4B7SBtha/qmf0:/qMp2oU1+gf1S42aRf
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

22431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW AllocConsole GetConsoleAliasExesLengthA InterlockedIncrement OpenJobObjectA InterlockedDecrement WriteConsoleInputA FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetCurrentThread GetWindowsDirectoryA WaitNamedPipeW EnumTimeFormatsW GetCommandLineA GetPriorityClass GetVolumePathNameW SetFileShortNameW GetCalendarInfoW LeaveCriticalSection CreateSemaphoreA GetFileAttributesW WriteConsoleW GetCompressedFileSizeA CompareStringW GetVolumePathNameA SetThreadPriority CreateMailslotW DeleteFiber GetCPInfoExW GetCurrentDirectoryW CreateMutexW GetProcAddress SearchPathA GlobalFree GetTempFileNameA OpenWaitableTimerA LoadLibraryA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW MoveFileA GetNumberFormatW BeginUpdateResourceA VirtualLock AddAtomA HeapWalk OpenJobObjectW GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA GetModuleHandleA GetStringTypeW GetCurrentDirectoryA GetShortPathNameW GetCPInfoExA GetFileInformationByHandle DebugBreak ReadConsoleOutputCharacterW OpenFileMappingA LocalFileTimeToFileTime ReadFile HeapReAlloc GetVolumeNameForVolumeMountPointA SetLastError Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection EncodePointer DecodePointer GetLastError WideCharToMultiByte HeapSetInformation GetStartupInfoW HeapFree RtlUnwind HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer CloseHandle RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW CreateFileW

user32

GetAltTabInfoW

advapi32

ReadEventLogW

Sharing