9de69c7a3e551dcbc9208221099680a7.bin
- SHA256 7dc2c1cad38edaaa9554a8ce00c6dcc440a147405a93958ead39075cc1cc2bc5
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9a880d7572486dd985ed6ffbf55eee8875077d9614befc12d5fbdaafd45e86d5.exe
Resource
win7-20231215-en
windows7-x64
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
9a880d7572486dd985ed6ffbf55eee8875077d9614befc12d5fbdaafd45e86d5.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
15 signatures
150 seconds
General
- Target 9de69c7a3e551dcbc9208221099680a7.bin
- Size 706KB
- Sample240113-dm79mabfb9
- SHA256 7dc2c1cad38edaaa9554a8ce00c6dcc440a147405a93958ead39075cc1cc2bc5
- MD5 381561665df6c430888f2d8cd4aaba35
- SHA1 c3aef1270dfd1e62621f119842fef2e492c0f9c7
- SHA512 bd657bf81a87c4b8f4c86d766f9df38c4cfb3b18cbeaaa64489787f25484ba69d5afcb90e74b632e413914f94a8267d066eeccbcde8392d5b0fd609b49bde36f
- SSDEEP 12288:89XsvdL+WeeEHizXSfex5SxI3HhVZ2PYipHJWRK8FEur937j84ou7dRv/IKw:cXqd2THizXOOEI37Z2AspQKKdrx7j84Q
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9a880d7572486dd985ed6ffbf55eee8875077d9614befc12d5fbdaafd45e86d5.exe
File Explorer
-
9de69c7a3e551dcbc9208221099680a7.bin.zip 706KB
-
9a880d7572486dd985ed6ffbf55eee8875077d9614befc12d5fbdaafd45e86d5.exe.exe 819KB
9a880d7572486dd985ed6ffbf55eee8875077d9614befc12d5fbdaafd45e86d5.exe
- IMPHASH a2a0817e6392d97a0384682bfc79e3d7
- SHA256 9a880d7572486dd985ed6ffbf55eee8875077d9614befc12d5fbdaafd45e86d5
- MD5 9de69c7a3e551dcbc9208221099680a7
- SHA1 e5ae2554407774c2cbbdde1c1dca1b15d51b6d20
- SHA512 d5bd138d9caf008504b9ee9e2186e38cd1df05f6fbf2dcf0e26ca7bb63f7be8bc87febff4082ad29bad5bcfb3c4e91a715942152d5f8b101677111b904ab8630
- SSDEEP 24576:Danoo9lgJSVadwqRPFOwbl3JeknVz4SZSVXYcXywbp:DablggMWHknVz57c
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
5
Entry point
7501
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LocalUnlock
SetDefaultCommConfigA
GlobalDeleteAtom
OpenFile
GetConsoleAliasesLengthW
EnumDateFormatsExW
CopyFileExW
MoveFileExA
SetEndOfFile
WriteConsoleOutputW
CreateJobObjectW
HeapFree
GlobalAlloc
LoadLibraryW
IsProcessInJob
DnsHostnameToComputerNameW
GetTimeFormatW
GetModuleFileNameW
GetCompressedFileSizeA
lstrcatA
SetConsoleTitleA
VirtualUnlock
LCMapStringA
FreeLibraryAndExitThread
GetLastError
ChangeTimerQueueTimer
GetLongPathNameW
HeapSize
CreateNamedPipeA
SetVolumeLabelW
GetConsoleDisplayMode
EnterCriticalSection
SetFileAttributesA
BuildCommDCBW
GetTempFileNameA
GetAtomNameA
LoadLibraryA
OpenWaitableTimerW
GetModuleHandleA
FreeEnvironmentStringsW
VirtualProtect
CompareStringA
QueryPerformanceFrequency
DeleteCriticalSection
LocalFree
SetEnvironmentVariableA
CompareStringW
GetTimeZoneInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FatalAppExitA
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
ReadFile
CreateFileA
CloseHandle
GetLocaleInfoW
RaiseException
user32
GetMonitorInfoW
GetDesktopWindow
Name
.text
Size
718KB
Virtual Size
718KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.puyihi
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=38, id=132, productName=VS2008 build 21022, version=21022,
count=20, id=149, productName=VS2008 build 21022, version=21022,
count=128, id=131, productName=VS2008 build 21022, version=21022,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=122, id=1, productName=Unmarked objects,
count=1, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,