GreyEnergymini (1)[.]bin

Resubmissions

29/11/2023, 15:20

231129-sq683ahc78 8

29/11/2023, 14:31

231129-rvpzxaha5v 8

17/11/2023, 11:51

231117-n1bspaab5y 7

Sharing

Copy URL Twitter E-mail

General

Target

GreyEnergymini (1).bin
Size

116KB
MD5

1cb35f4340a37e75aff1f901629b59f3
SHA1

cc1ce3073937552459fb8ed0adb5d56fa00bcd43
SHA256

b60c0c04badc8c5defab653c581d57505b3455817b57ee70af74311fa0b65e22
SHA512

b9f319b62818cbafd95c8bedd19238ce2ae71c4c1b8dc127550f82710366dd787cd30f4800f7010d30f03899d5fec80fc58359973909b9f8c38a4304828d1aab
SSDEEP

1536:82dRSDlre9NigEv4bahAOSSd5AAKIyax6lB027TUqYe6POoauGEz1qIUAWs2h+My:0eaAM7Ld5AAKIwlB3ORWqvzkzoMUv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GreyEnergymini (1).bin

Files

GreyEnergymini (1).bin
.exe windows:5 windows x86 arch:x86

0867dae1b7dc01d9b94be5a2c4d8d929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSEnumerateSessionsA
WTSFreeMemory

kernel32

CloseHandle
GetVersionExA
GetModuleFileNameA
GetLastError
CreateProcessA
CreateEventA
Sleep
SetEvent
WaitForSingleObject
GetCurrentProcess
SetLastError
GetModuleHandleW
GetProcAddress
ExitProcess
GetCommandLineA
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers

advapi32

CloseServiceHandle
RegCloseKey
ControlService
GetLengthSid
OpenSCManagerA
SetServiceStatus
QueryServiceStatus
DuplicateTokenEx
RegOpenKeyExA
ReportEventA
RegisterServiceCtrlHandlerExA
SetTokenInformation
DeregisterEventSource
CreateServiceA
RegQueryValueExA
DeleteService
StartServiceCtrlDispatcherA
CreateProcessAsUserA
OpenServiceA
RegisterEventSourceA
OpenProcessToken

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

0867dae1b7dc01d9b94be5a2c4d8d929

Headers

DLL Characteristics

File Characteristics

Imports

wtsapi32

kernel32

advapi32

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B