2qbGLDSDitx6x6NpSCcuTnYE[.]bin[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2qbGLDSDitx6x6NpSCcuTnYE.bin.exe
Size 591KB
Sample230719-d4ryzafe68
SHA256 42acb4ebe6efba15eb0ed6d1c404335458cb4594493116edf2b0af257fd6e24e
MD5 92c4629358a520e41cc36eeb56af712d
SHA1 8fecd46a0aa61c681e7a7f85a950633c85229474
SHA512 8580054f5bc92f9956de7c47e36bb48cb1dfb0b70dff33494e5722eb2c118cc919d2e2162a2b03249ac6af031d8f7d3b44473c3cb8df36b4b93f5b877b7c9908
SSDEEP 12288:y72LPfVjvyL8XM3lRkRc4YFwjsWAfRgantPbcTTn7axerx7:eafVrSWM3/kRc4lAgantPbcHn7a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2qbGLDSDitx6x6NpSCcuTnYE.bin.exe

File Explorer

2qbGLDSDitx6x6NpSCcuTnYE.bin.exe

.exe 591KB

2qbGLDSDitx6x6NpSCcuTnYE.bin.exe

IMPHASH 4673ad56625d375f2efee239af061364
SHA256 42acb4ebe6efba15eb0ed6d1c404335458cb4594493116edf2b0af257fd6e24e
MD5 92c4629358a520e41cc36eeb56af712d
SHA1 8fecd46a0aa61c681e7a7f85a950633c85229474
SHA512 8580054f5bc92f9956de7c47e36bb48cb1dfb0b70dff33494e5722eb2c118cc919d2e2162a2b03249ac6af031d8f7d3b44473c3cb8df36b4b93f5b877b7c9908
SSDEEP 12288:y72LPfVjvyL8XM3lRkRc4YFwjsWAfRgantPbcTTn7axerx7:eafVrSWM3/kRc4lAgantPbcHn7a
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

115676

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW RegCreateKeyExW CloseTrace GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids RegCloseKey OpenProcessToken TraceMessage DuplicateToken ControlTraceW StartTraceW EnableTrace CheckTokenMembership GetTokenInformation RegOpenKeyExW CreateWellKnownSid RegQueryValueExW

kernel32

GetLocaleInfoW FormatMessageW FreeLibrary GetProcAddress LoadLibraryW Sleep GetLocalTime GetCalendarInfoW QueryPerformanceCounter GetModuleHandleW SetUnhandledExceptionFilter GetStartupInfoW CreateThread GetDriveTypeW GetVolumeInformationW InitializeSListHead RtlCaptureStackBackTrace InterlockedPushEntrySList InterlockedPopEntrySList FileTimeToSystemTime SystemTimeToFileTime LeaveCriticalSection EnterCriticalSection CloseHandle SetEvent DeleteCriticalSection InitializeCriticalSection GetVolumeNameForVolumeMountPointW GetTimeFormatW GetDateFormatW SetLastError WaitForSingleObject CreateEventW GetCurrentProcess SetErrorMode GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetTickCount UnhandledExceptionFilter FindFirstFileW FindNextFileW GetProcessHeap HeapSetInformation RegisterApplicationRestart GetCommandLineW LocalFree GetLastError CreateDirectoryW DeleteFileW GetFileAttributesW FindClose CreateFileW DeviceIoControl MoveFileExW LoadLibraryExW GetVolumePathNameW ExpandEnvironmentStringsW

gdi32

DeleteDC GdiFlush SelectObject SetLayout CreateCompatibleDC CreateDIBSection SetTextColor ExtTextOutW CreateFontIndirectW DeleteObject GetDeviceCaps SetBkColor

user32

LoadStringW IsDlgButtonChecked GetDlgItemTextW SetDlgItemTextW CheckDlgButton DrawFrameControl OffsetRect SetTimer KillTimer GetSysColorBrush GetWindowLongPtrW DestroyWindow EnableWindow EndDialog SetWindowLongPtrW EndPaint GetSysColor MapWindowPoints BeginPaint ShowWindow PostMessageW SetWindowPos LoadImageW GetDesktopWindow SetFocus SetWindowLongW GetWindowLongW GetDlgItem DestroyIcon MoveWindow GetWindowRect GetClientRect ClientToScreen GetSystemMetrics SendMessageW DialogBoxParamW SetForegroundWindow GetDC SetWindowTextW ReleaseDC SystemParametersInfoW SendMessageTimeoutW GetWindowTextW EnumWindows MessageBoxW ChangeWindowMessageFilter RegisterWindowMessageW InflateRect

msvcrt

_vscwprintf iswspace memcpy memset ?terminate@@YAXXZ __set_app_type _fmode _commode __setusermatherr _amsg_exit _initterm _acmdln exit _cexit _exit _XcptFilter __C_specific_handler __getmainargs _purecall ??2@YAPEAX_K@Z _wtol memmove wcstok _wcsicmp ??3@YAXPEAX@Z _ismbblead wcschr _vsnwprintf

shell32

CommandLineToArgvW ShellExecuteExW SHGetFileInfoW SHGetStockIconInfo

ole32

CoUninitialize CoTaskMemFree CoTaskMemAlloc CoDisconnectObject CoCreateInstance CoInitializeEx CoInitializeSecurity

oleaut32

SysStringLen VariantClear VariantInit VariantTimeToSystemTime SysFreeString SysAllocString SystemTimeToVariantTime

comctl32

ImageList_AddMasked ImageList_Add ImageList_ReplaceIcon ImageList_Destroy ImageList_Create ord345 InitCommonControlsEx ord344

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind WinSqmAddToStream RtlAllocateHeap RtlFreeHeap RtlGetLastNtStatus EtwTraceMessage

virtdisk

GetStorageDependencyInformation

sxshared

SxTracerDebuggerBreak SxTracerShouldTrackFailure SxTracerGetThreadContextRetail