gurcu | ebdda35a64fdd77737a3ec887c3c63b9[.]bin

General

Target
ebdda35a64fdd77737a3ec887c3c63b9.bin
Size 1.3MB
Sample230711-pl81bagh58
SHA256 dd91d4063900789c1d9de4b8f5a3d71dd5a7b207df020fa530e019050dc70022
MD5 14a87a6c16ccaeed39966e8016bbd87d
SHA1 00ab54afc68683b5661b52d4c7cced2eb54773c8
SHA512 9a03fd3383ec5fe30a786a5ddec61653e1b9603d6c16ac1a15d8f11b5e9ce4e25f74e6f20b1fe65373c871f2ca845eacd6645465ae1b177ea20793e48905ca6b
SSDEEP 24576:JQFlG7NZhhm3GaVUvM/g3E9NUM6RZmjfXkUflJ/jr:yFg7NZhhm3jaM/gU9ZAS9lJX
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

gurcu

Malware Config

Signatures

Gurcu family
gurcu

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e85101062f748f61e87f91bac8abcaa11b5754fb364b8e99cc67b9e7f0283edc.exe

File Explorer

ebdda35a64fdd77737a3ec887c3c63b9.bin

.zip 1.3MB
e85101062f748f61e87f91bac8abcaa11b5754fb364b8e99cc67b9e7f0283edc.exe

.exe 1.4MB

ebdda35a64fdd77737a3ec887c3c63b9.bin

SHA256 dd91d4063900789c1d9de4b8f5a3d71dd5a7b207df020fa530e019050dc70022
MD5 14a87a6c16ccaeed39966e8016bbd87d
SHA1 00ab54afc68683b5661b52d4c7cced2eb54773c8
SHA512 9a03fd3383ec5fe30a786a5ddec61653e1b9603d6c16ac1a15d8f11b5e9ce4e25f74e6f20b1fe65373c871f2ca845eacd6645465ae1b177ea20793e48905ca6b
SSDEEP 24576:JQFlG7NZhhm3GaVUvM/g3E9NUM6RZmjfXkUflJ/jr:yFg7NZhhm3jaM/gU9ZAS9lJX
MD5 SHA1 SHA512 SSDEEP

Password

infected

e85101062f748f61e87f91bac8abcaa11b5754fb364b8e99cc67b9e7f0283edc.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e85101062f748f61e87f91bac8abcaa11b5754fb364b8e99cc67b9e7f0283edc
MD5 ebdda35a64fdd77737a3ec887c3c63b9
SHA1 22bed885d16c61ee24a42a704ec1b1174dc1eccb
SHA512 e3cf15ede970349d1f35f3334c4d2bf4c6bf2c9664a704405b22a7f315637942bba64dacff86875343f294891033295666421791b43ff371035ca24d3dbebb0e
SSDEEP 24576:hYVeGFNjhp+qJBzrYW9pivo5gG3xIFzADL78rFtNxm1R+H2AkfhwXlCt:hElNf+qn/9pLV8zi7qFHxmn+tia
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

1419246

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing