0cc27f666ca2e23f89f60480975e49e5[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

0cc27f666ca2e23f89f60480975e49e5.bin
Size

283KB
MD5

0cc27f666ca2e23f89f60480975e49e5
SHA1

51f3f921a4e76c675bf144269cfb3d4488343815
SHA256

afa5f9c32f738434d37798486baf6a66cdfd030bc77f94d2923e4b85dc34dd72
SHA512

62ea033bddf2fa63bdb7b628e2d3dd2e800e7e0fe37c505ad922203b7c304ac007929319452424adf4ea60eb2f036ce89908615ef60108abb3a9c95ec14eab2e
SSDEEP

3072:AVQwGgXqvnU5kYbPDx9wt/ve4E2jVLXINjzapDx+C4snLqJWYiJo3VbfR3:A9knM9/wZe4E2jVcNaVxhuGJoFbf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cc27f666ca2e23f89f60480975e49e5.bin

Files

0cc27f666ca2e23f89f60480975e49e5.bin
.exe windows:5 windows x86

096de3c625c630016d264cdf56b04b22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetNativeSystemInfo
GetCPInfo
GlobalAlloc
LoadLibraryW
TerminateThread
GetMailslotInfo
SetLastError
GetProcAddress
AddAtomW
WriteConsoleW
CloseHandle
CreateFileW
GetConsoleCP
FlushFileBuffers
OutputDebugStringW
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
SetStdHandle
HeapReAlloc
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
FatalAppExitA
CreateSemaphoreW
GetLastError
HeapFree
EncodePointer
DecodePointer
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetProcessHeap
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
ReadFile
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
HeapAlloc
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
SetEndOfFile

user32

GetNextDlgTabItem
TranslateAcceleratorW
GetNextDlgGroupItem
LoadMenuIndirectA
LoadImageW
LoadStringA
LoadBitmapA
LoadMenuA
LoadCursorW
TranslateMessage
LoadIconW
GetRawInputBuffer
PeekMessageA
LoadCursorFromFileW
GetRawInputDeviceInfoA
CreateIconFromResource
LoadAcceleratorsA
RegisterRawInputDevices
DispatchMessageA
GetMenuInfo
OpenClipboard
UpdateWindow
LoadKeyboardLayoutA
GetRawInputDeviceList
CallMsgFilterA

Sections

.text
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 749KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

096de3c625c630016d264cdf56b04b22

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 199KB - Virtual size: 199KB

.data Size: 6KB - Virtual size: 749KB

.idata Size: 3KB - Virtual size: 6KB

.rsrc Size: 64KB - Virtual size: 63KB

.reloc Size: 9KB - Virtual size: 12KB

.text
Size: 199KB - Virtual size: 199KB

.data
Size: 6KB - Virtual size: 749KB

.idata
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 64KB - Virtual size: 63KB

.reloc
Size: 9KB - Virtual size: 12KB