5b980357cba7a978afca609bf1ae321a[.]bin

General

Target

5b980357cba7a978afca609bf1ae321a.bin
Size

2KB
MD5

dd7944c991b6d7d2538abd82c52c5e5a
SHA1

82f3655e65569451d1328a9954c58c54117ce8fb
SHA256

4340dc2deb80ca1df92002aed2d61a4c0d17536088c58ce5bda1b0e9ea4f1da2
SHA512

437ea4b51ce92b2a36a9471c3c37e7e22b01f0a905603d738feed37763e4daa992df8b2f208d7583e01046b27e3299de6179b6af5a716b04bd6f5bb7bbe97c93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3c55ae1096288da41ad7907954edccb318012337435698b0af35b9fe13973aa0.exe

Files

5b980357cba7a978afca609bf1ae321a.bin
.zip

Password: infected
3c55ae1096288da41ad7907954edccb318012337435698b0af35b9fe13973aa0.exe
.exe windows x86

Password: infected

f4982edbc6781a2fa569735f052b2b1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_except_handler3
_adjust_fdiv
_controlfp
__dllonexit
_onexit
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_wfopen
_exit
ftell
fseek
fread

shlwapi

PathIsRootA
StrToIntExA
SHRegDeleteEmptyUSKeyA
PathCreateFromUrlA
UrlUnescapeW
SHRegCloseUSKey
StrCSpnA
PathAppendW

kernel32

WriteTapemark
FindFirstFileA
MoveFileWithProgressA
TlsFree
FileTimeToDosDateTime
Module32Next
FindNextFileA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
EnumResourceLanguagesW

odbc32

ord138
ord176
ord57
PostODBCError
ord63
ord165
ord40
ord75

winmm

mixerGetNumDevs
waveInReset
mixerGetLineControlsW
waveOutGetErrorTextW
mmioSendMessage
GetDriverModuleHandle
WOW32DriverCallback
midiInGetErrorTextA
mmioOpenW

rpcrt4

I_RpcSend
RpcMgmtSetComTimeout
NdrRpcSmSetClientToOsf
NdrRpcSmClientAllocate
RpcServerUseProtseqEpA
RpcObjectSetType
I_RpcConnectionInqSockBuffSize

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f4982edbc6781a2fa569735f052b2b1b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

kernel32

odbc32

winmm

rpcrt4

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 60B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 60B

.rsrc
Size: 512B - Virtual size: 480B