0538599386e6e92b7acfb3a7cbb40aee[.]bin

General

Target
0538599386e6e92b7acfb3a7cbb40aee.bin
Size 179KB
Sample240107-bcvjnsbdcp
SHA256 885e71a79cae7e2ce156cf2dd4c166538a0b2bf02a5d170a9d13ded41748113d
MD5 0538599386e6e92b7acfb3a7cbb40aee
SHA1 5c6c1dd4b3fee790e5fa326614ffa41cb07b1f87
SHA512 7effff8a980f296f61dd5c0c0f79e8687e5554521729b1eee48f8f86d37c203e41dba0c9d4a1f8f2456b17f8a0a03db72818a3da0812e483772f7ed5a4f3a11f
SSDEEP 3072:W4qdWTLGklFooCQw0x23rvMJlmzwqALjQA51G/RP0GUCFlk5UpW:W4qATL5n38223zMJewqUTsJ0G2U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0538599386e6e92b7acfb3a7cbb40aee.bin

File Explorer

0538599386e6e92b7acfb3a7cbb40aee.bin

.exe 179KB

0538599386e6e92b7acfb3a7cbb40aee.bin

IMPHASH ecb24c3a29b2e8e22d97dc82aab435bd
SHA256 885e71a79cae7e2ce156cf2dd4c166538a0b2bf02a5d170a9d13ded41748113d
MD5 0538599386e6e92b7acfb3a7cbb40aee
SHA1 5c6c1dd4b3fee790e5fa326614ffa41cb07b1f87
SHA512 7effff8a980f296f61dd5c0c0f79e8687e5554521729b1eee48f8f86d37c203e41dba0c9d4a1f8f2456b17f8a0a03db72818a3da0812e483772f7ed5a4f3a11f
SSDEEP 3072:W4qdWTLGklFooCQw0x23rvMJlmzwqALjQA51G/RP0GUCFlk5UpW:W4qATL5n38223zMJewqUTsJ0G2U
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA WriteConsoleOutputCharacterA InterlockedDecrement QueryDosDeviceA InterlockedCompareExchange SetComputerNameW GetComputerNameW GetTickCount VirtualFree GlobalFindAtomA LoadLibraryW SetCommConfig SetConsoleMode GetWriteWatch WriteConsoleW SetComputerNameExW SetThreadPriority GetStartupInfoW GetConsoleAliasesLengthW SetLastError GetProcAddress VirtualAlloc InterlockedExchangeAdd LocalAlloc CreateHardLinkW TransmitCommChar AddAtomW FindFirstVolumeMountPointA GetModuleHandleA IsDebuggerPresent GetStringTypeW GetCurrentProcessId SetFileAttributesW DeleteFileA lstrcpyA WriteConsoleOutputCharacterW GetNativeSystemInfo FindFirstChangeNotificationW GetLastError GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc HeapFree RaiseException GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA HeapSize

gdi32

StrokeAndFillPath GetCharABCWidthsFloatW

advapi32

SetKernelObjectSecurity

shell32

ShellAboutA

Sharing