8bc0446144142c51570da1920f2da8c1[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

8bc0446144142c51570da1920f2da8c1.bin
Size

270KB
MD5

e5179e2b746f2a4d07c7539e9585074f
SHA1

8acde548f6f4d60c5ed55fd08e4a8b170ba08871
SHA256

62c3e97b6a59d53f5c4ae0b0c85ad507f85253bdfe207d7c51ee6df3c96592ee
SHA512

b91211f69ad456f5f94cbc99c9572af79317043b2e4210081789f871c0fb7f1cd9edf2c7638250d88046d0ce424277c9e664a600b14190cc2031dbe079ca5e10
SSDEEP

6144:0BhBCQWGEIyn5CciBCOHzoStHK8HPQiJsjCGl2HO+NRS:0BhQQaIyvOltHP52vl2uqRS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/56b4f307126f78e16ac2ad2e4044de61cb207864bf194ba6702108cb65475369.exe

Files

8bc0446144142c51570da1920f2da8c1.bin
.zip

Password: infected
56b4f307126f78e16ac2ad2e4044de61cb207864bf194ba6702108cb65475369.exe
.exe windows:5 windows x86 arch:x86

Password: infected

f9271472e44fa5716fdfebe0be7b1612

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetMetaRgn
GetMapMode
GetTextCharset
GetFontLanguageInfo
SetTextAlign
GetPolyFillMode

user32

GetKeyboardType
ShowWindow
GetMenuItemID
MoveWindow
GetMenuState
GetMenuCheckMarkDimensions
CheckDlgButton
RemovePropA
GetWindowLongA
GetPropA
GetMenuItemCount
LoadIconA
SetWindowTextA
SetFocus
SendMessageA
DrawTextA
EndDialog
PostMessageA
GetDlgItem
GetDialogBaseUnits
GetWindowContextHelpId
CallWindowProcA
WindowFromDC
SetDlgItemTextA
GetScrollPos
GetMenu
GetDlgItemInt

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLastError
GlobalFlags
IsDebuggerPresent
GetFileType
GlobalAlloc
GlobalHandle
QueryPerformanceCounter
GetDriveTypeA
GetProcAddress
CloseHandle
DeleteFileA
GetProcessHeap
GetVersion
IsProcessorFeaturePresent
GetCurrentThreadId
LocalFlags
GetCurrentProcessId
FlushFileBuffers
GetModuleHandleA
GetTickCount
SizeofResource
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameA
SetEnvironmentVariableA

Sections

.text
Size: 430KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f9271472e44fa5716fdfebe0be7b1612

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 430KB - Virtual size: 430KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 46KB - Virtual size: 162KB

.text
Size: 430KB - Virtual size: 430KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 46KB - Virtual size: 162KB