cc8b7041532e9e251a2eff40fc3c323c[.]bin

General

Target
cc8b7041532e9e251a2eff40fc3c323c.bin
Size 188KB
Sample231116-dl8trsfc77
SHA256 2836f15d45fe9a549de16bc880b24c390079b974e240f7885a0b5b662661c6b7
MD5 cec95821a7d8577ae12eaf7b561ee2b2
SHA1 d6a29689b51ca807e179795ec308a1972e17ff57
SHA512 c02b87ee0c7a75cab28608efebb7fa5f7668afcf6913c25925f683f3ea70bcb53ab597da54274e5f7fad90d5445fe7d6165b83bfc734e5b21c52847061700d6f
SSDEEP 3072:YaA1CjCSppPMxVDBK8fKgfXAHvmIt3NP+BCF1FhpsWDNHcIy61kkH/n9c7ba7:WMm8pPYd3QPX3d+BOVeWDdcIZ1l/9Qb+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7db04ddb55518c98493c17e533c6607d28a10d5385aa236d9a84a10670c49574.exe

File Explorer

cc8b7041532e9e251a2eff40fc3c323c.bin

.zip 188KB
7db04ddb55518c98493c17e533c6607d28a10d5385aa236d9a84a10670c49574.exe

.exe 414KB

cc8b7041532e9e251a2eff40fc3c323c.bin

SHA256 2836f15d45fe9a549de16bc880b24c390079b974e240f7885a0b5b662661c6b7
MD5 cec95821a7d8577ae12eaf7b561ee2b2
SHA1 d6a29689b51ca807e179795ec308a1972e17ff57
SHA512 c02b87ee0c7a75cab28608efebb7fa5f7668afcf6913c25925f683f3ea70bcb53ab597da54274e5f7fad90d5445fe7d6165b83bfc734e5b21c52847061700d6f
SSDEEP 3072:YaA1CjCSppPMxVDBK8fKgfXAHvmIt3NP+BCF1FhpsWDNHcIy61kkH/n9c7ba7:WMm8pPYd3QPX3d+BOVeWDdcIZ1l/9Qb+
MD5 SHA1 SHA512 SSDEEP

Password

infected

7db04ddb55518c98493c17e533c6607d28a10d5385aa236d9a84a10670c49574.exe

IMPHASH 21e0e8ef5bfebf9362c851b68dae053c
SHA256 7db04ddb55518c98493c17e533c6607d28a10d5385aa236d9a84a10670c49574
MD5 cc8b7041532e9e251a2eff40fc3c323c
SHA1 33cd1d462a80a2bac76b82d06d7e826e9db6b374
SHA512 3960fc318152226f5a7b5ded76781725bdc508a5d00639adbb40ecfefc842f5cc9eba1bfa134fed147ccabdc2f2b7a0725621083306c16a6c46a296bef11803e
SSDEEP 6144:GcXiUbluekAVmOHxrknAOYx8tqp3G8pd0ls8m9b8HxCEyl+Lr:RiUBuelnknzgvf0ls8mJ6vnH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

6

Entry point

30515

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

ValidateRgn EnableWindow

advapi32

RegSetKeySecurity

kernel32

ReadConsoleW CreateFileW CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess GetExitCodeThread GetStringTypeW WideCharToMultiByte MultiByteToWideChar EncodePointer DecodePointer InitializeCriticalSectionEx LCMapStringEx WriteConsoleW GetCPInfo HeapSize RaiseException RtlUnwind GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap GetFileType SetStdHandle GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc

Sharing