6842403982c36b6c450fde3035eb7043.bin
- SHA256 d0c2724e46071f707fe1575f635ed103b018ee9a57b4171307cd64e7634f8a8a
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
684bcee9dcb5326013108c4f4fb40dce8d98bc937a00b64e9d9f9754d0c78377.exe
Resource
win7-20231215-en
windows7-x64
31 signatures
150 seconds
Behavioral task
behavioral2
Sample
684bcee9dcb5326013108c4f4fb40dce8d98bc937a00b64e9d9f9754d0c78377.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
14 signatures
150 seconds
General
- Target 6842403982c36b6c450fde3035eb7043.bin
- Size 173KB
- Sample240109-dalj4acgbq
- SHA256 d0c2724e46071f707fe1575f635ed103b018ee9a57b4171307cd64e7634f8a8a
- MD5 4efee5f5fb726fdaaff505f20580be5d
- SHA1 ff06a158b9a56b5a2f818a3376f6fba176b4c24a
- SHA512 c6367f4bdd2be366a7d6067cbcbc1f0aceccbc0f8a70c702b0022aa21882465f62275f0fe680d92e2d69365070a52d895f753a6e0c56fd8b39536a55b480af90
- SSDEEP 3072:aPtaD6thxxdQWoBprrPEthKeGZpM+7BM1BME+tYv4rt0Si0efRDtjJxHxHqu:WauRxdQ1rPEbKeSesyZkI4Rbi0yRRjJj
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/684bcee9dcb5326013108c4f4fb40dce8d98bc937a00b64e9d9f9754d0c78377.exe
File Explorer
-
6842403982c36b6c450fde3035eb7043.bin.zip 173KB
-
684bcee9dcb5326013108c4f4fb40dce8d98bc937a00b64e9d9f9754d0c78377.exe.exe 311KB
684bcee9dcb5326013108c4f4fb40dce8d98bc937a00b64e9d9f9754d0c78377.exe
- IMPHASH 41664c42ec8e82b6bc77023fb19fd70a
- SHA256 684bcee9dcb5326013108c4f4fb40dce8d98bc937a00b64e9d9f9754d0c78377
- MD5 6842403982c36b6c450fde3035eb7043
- SHA1 d40806e8623b10811703aadf27d5b055da6e98a5
- SHA512 2d10d7bb85475a86f85019228a88cebf0da92ed5cb24102facbb34a875f3666d0ebf0783b1db1b996f2087feb672f337e91cb72c8b899c632496344a42e4ab37
- SSDEEP 3072:uQLPli/LX0eRJibugxk++1iyvoBgDym4BV9JxNcdOOQVmRZ+pfTK7KVDrc+B5f2B:uQLPwkvB+iIoBoSVPW3ofTgYn79oUq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
5
Entry point
8581
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CopyFileExW
FreeLibrary
CreateJobObjectW
HeapFree
FreeEnvironmentStringsA
GetModuleHandleW
TlsSetValue
IsProcessInJob
WriteConsoleOutputA
SetConsoleCP
LeaveCriticalSection
DnsHostnameToComputerNameW
SetMessageWaitingIndicator
LocalHandle
GetCompressedFileSizeA
GetTimeZoneInformation
GetConsoleAliasesLengthW
SetCurrentDirectoryA
GetLastError
SetLastError
GetProcAddress
GetLongPathNameA
CreateNamedPipeA
OpenWaitableTimerA
LoadLibraryA
LocalAlloc
SetConsoleOutputCP
VirtualLock
AddAtomA
CreateWaitableTimerW
LocalFree
SetFileAttributesW
LCMapStringW
CompareStringW
TryEnterCriticalSection
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoW
GetLocaleInfoA
WideCharToMultiByte
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
CompareStringA
SetEnvironmentVariableA
advapi32
CreateServiceA
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
33KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
417B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.logulax
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.nec
Size
1024B
Virtual Size
577B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=17, id=149, productName=VS2008 build 21022, version=21022,
count=82, id=131, productName=VS2008 build 21022, version=21022,
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=98, id=1, productName=Unmarked objects,
count=1, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,