fd47c5c48f9f61d773c813401f669683[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

fd47c5c48f9f61d773c813401f669683.bin
Size

147KB
MD5

a98834aeac640a9dd20a67f1990c72af
SHA1

fc29673319d6798b33da3b00dc67b54bb4f5f478
SHA256

4b4b49c7227e78c258a8548971a0560002cb276177769ab9270ec89768359845
SHA512

67e717f6fa60348c893cc9a965fba4ddafcb9cf9263291bf5c0157a8e8da62023f8301745f0e7d8d2cd3e8aad49089d7531cef07ecb06af2cbfafcfb4ba41092
SSDEEP

3072:SlzZcoZak5BYxE7FmG0fzKQnwSfcARJ6v1JnltRfkuB++GGp3n2l:SbPZakjYxE7EGinn5dRQvDauM5uGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/31289b717df3d04315d3f0b61cbba5c78679730a9c9fd74aaf953bc0ee6798c7.exe

Files

fd47c5c48f9f61d773c813401f669683.bin
.zip

Password: infected
31289b717df3d04315d3f0b61cbba5c78679730a9c9fd74aaf953bc0ee6798c7.exe
.exe windows:5 windows x86

Password: infected

3237b581b15be84c5fe874ddf55fe383

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
WriteConsoleInputA
AddConsoleAliasW
SetVolumeMountPointW
FreeEnvironmentStringsA
_lclose
GetProcessPriorityBoost
GetTickCount
GetNumberFormatA
GetWindowsDirectoryA
GetCompressedFileSizeW
GlobalAlloc
LoadLibraryW
AssignProcessToJobObject
EnumSystemCodePagesA
FindNextVolumeW
GetFileAttributesW
CreateActCtxA
GetLastError
GetProcAddress
VirtualAlloc
PeekConsoleInputW
RemoveDirectoryA
GetSystemWindowsDirectoryW
LoadLibraryA
CreateHardLinkW
BeginUpdateResourceA
GetCommMask
AddAtomA
FoldStringA
GlobalFindAtomW
GetOEMCP
OpenFileMappingW
FindNextFileW
EndUpdateResourceA
GetCurrentProcessId
ReadConsoleOutputCharacterW
LocalFree
ReadFile
GetProcessHeap
SetEndOfFile
LoadResource
PeekNamedPipe
SetComputerNameA
FillConsoleOutputCharacterA
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
HeapSize
ExitProcess
RtlUnwind
RaiseException
WriteFile
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
CreateFileA
GetModuleHandleA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

CharToOemBuffA
ChangeDisplaySettingsW
PostMessageW
LoadMenuA
GetWindowTextLengthW

gdi32

GetCharacterPlacementA
GetPolyFillMode

advapi32

BackupEventLogW

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

3237b581b15be84c5fe874ddf55fe383

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 161KB - Virtual size: 160KB

.data Size: 7KB - Virtual size: 1.5MB

.rsrc Size: 37KB - Virtual size: 544KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 161KB - Virtual size: 160KB

.data
Size: 7KB - Virtual size: 1.5MB

.rsrc
Size: 37KB - Virtual size: 544KB

.reloc
Size: 10KB - Virtual size: 10KB