82b268946a38d43664d092461d57a2d1[.]bin

General

Target

82b268946a38d43664d092461d57a2d1.bin
Size

2KB
MD5

6470d2ec127260f6ddcde8dbf67723f6
SHA1

08cb4ad0f873e9cea69e786f0e7306802bd9cd7d
SHA256

6340d6551e571abc63ee5292f74bca834b147bee8e2d46875f7baf5030eecd6e
SHA512

3a9d7116d3f11ce057c9ba68bb05769aa99508a9eb63330f265f0394e18307c2839e7574e90bac9d35670c0da877640a816ddc6159864ca9bcc286b052b25e9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bda02aca6084288da4e4c4674b7b1733ff03056ec12836629201926e60df3ecd.exe

Files

82b268946a38d43664d092461d57a2d1.bin
.zip

Password: infected
bda02aca6084288da4e4c4674b7b1733ff03056ec12836629201926e60df3ecd.exe
.exe windows x86

Password: infected

f4982edbc6781a2fa569735f052b2b1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_except_handler3
_adjust_fdiv
_controlfp
__dllonexit
_onexit
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_wfopen
_exit
ftell
fseek
fread

shlwapi

PathIsRootA
StrToIntExA
SHRegDeleteEmptyUSKeyA
PathCreateFromUrlA
UrlUnescapeW
SHRegCloseUSKey
StrCSpnA
PathAppendW

kernel32

WriteTapemark
FindFirstFileA
MoveFileWithProgressA
TlsFree
FileTimeToDosDateTime
Module32Next
FindNextFileA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
EnumResourceLanguagesW

odbc32

ord138
ord176
ord57
PostODBCError
ord63
ord165
ord40
ord75

winmm

mixerGetNumDevs
waveInReset
mixerGetLineControlsW
waveOutGetErrorTextW
mmioSendMessage
GetDriverModuleHandle
WOW32DriverCallback
midiInGetErrorTextA
mmioOpenW

rpcrt4

I_RpcSend
RpcMgmtSetComTimeout
NdrRpcSmSetClientToOsf
NdrRpcSmClientAllocate
RpcServerUseProtseqEpA
RpcObjectSetType
I_RpcConnectionInqSockBuffSize

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f4982edbc6781a2fa569735f052b2b1b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

kernel32

odbc32

winmm

rpcrt4

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 60B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 60B

.rsrc
Size: 512B - Virtual size: 480B