54ae3b52eff57a8fc75697d2c48f3279[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

54ae3b52eff57a8fc75697d2c48f3279.bin
Size

151KB
MD5

54ae3b52eff57a8fc75697d2c48f3279
SHA1

c43b518816a76144b993149759d0806f6c7e1c5b
SHA256

4db703871896f05e8638b725b1aad90e68a0a7f0e935dcfc2ea3e6de4ea78374
SHA512

6f9de4577779c39fddd7ef3b5c7ae3a6ab6c699b45a2fb4cdc50249ba73c8ea58e7e4084b0ee718735c06ffcaa859e22f13fd1f9a1a1c5e9e83a268fe3545ac2
SSDEEP

3072:KYiGLZNi15nGRAlNopv+SQSKABCJSrvu9:KYiKu1sRfpvRrHrvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54ae3b52eff57a8fc75697d2c48f3279.bin

Files

54ae3b52eff57a8fc75697d2c48f3279.bin
.exe windows:6 windows x86 arch:x86

6aad837909ed5ba39fbdce3fd0d557c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
FindResourceW
LoadLibraryW
SizeofResource
LockResource
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
LoadLibraryExW
LoadResource
GetProcAddress
GetModuleHandleW
GetProcessHeap
HeapFree
HeapAlloc
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
HeapReAlloc
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetLastError
RaiseException
RtlUnwind
GetCommandLineA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
IsDebuggerPresent
GetStdHandle
WriteFile
GetModuleFileNameW

comdlg32

PageSetupDlgA
PageSetupDlgW
CommDlgExtendedError
GetOpenFileNameW
PrintDlgA
ChooseFontW
GetSaveFileNameA
GetFileTitleA

mswsock

rcmd
GetNameByTypeW
GetServiceW
EnumProtocolsW
EnumProtocolsA
AcceptEx

crypt32

CryptMsgVerifyCountersignatureEncoded
CryptGetMessageSignerCount
CertAddCRLContextToStore
CertNameToStrW
CryptDecodeMessage

mpr

WNetEnumResourceA
WNetOpenEnumA
WNetGetLastErrorW
WNetAddConnection2W
WNetConnectionDialog

wsock32

getsockopt
__WSAFDIsSet
WSACancelBlockingCall

msi

ord145
ord93
ord89
ord129
ord60
ord170
ord96
ord73

user32

ShowWindow

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aad837909ed5ba39fbdce3fd0d557c0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

mswsock

crypt32

mpr

wsock32

msi

user32

Sections

.text Size: 103KB - Virtual size: 102KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 103KB - Virtual size: 102KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 6KB - Virtual size: 6KB