60ec05954f1ade4e7313b640f63362ab[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

60ec05954f1ade4e7313b640f63362ab.bin
Size

172KB
MD5

60ec05954f1ade4e7313b640f63362ab
SHA1

7263952e17e962328cba48eeacc61d0a813330c6
SHA256

6a042e8a51355428f8281c9c79209168680aedfd356219b06890f0eac8d19c0e
SHA512

5df3b3806b9fcdd49d2ad480a9f7c5b932e99854fe4aceb20ff30de9e27f5598d156d5cae4ce39db11d422f23c765b6ebcc7a09490cb55f869e48fa25be1614c
SSDEEP

3072:nkxS1GaZ3FFbCZnvmwj4b10C1INAu/Evl6R4KSmK:maZbCZvm/1x1I3s4xK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ec05954f1ade4e7313b640f63362ab.bin

Files

60ec05954f1ade4e7313b640f63362ab.bin
.dll regsvr32 windows:4 windows x86 arch:x86

e89b083be8cf54a77e89720319cff8ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetCurrentThreadId
GetCurrentProcessId
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemDirectoryA
WritePrivateProfileStringA
IsBadWritePtr
IsBadReadPtr
MoveFileA
DeleteFileA
TerminateThread
CloseHandle
GetLocalTime
SetFileAttributesA
CopyFileA
WriteFile
CreateFileA
GetVersion
GetWindowsDirectoryA
CreateDirectoryA
GetShortPathNameA
FindClose
FindFirstFileA
WaitForSingleObject
Process32Next
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
SystemTimeToFileTime
FileTimeToSystemTime
GetUserDefaultLangID
GetTempPathA
GetPrivateProfileSectionNamesA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesA
GetCurrentDirectoryA
GetFullPathNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
GetCurrentProcess
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
ExitProcess
VirtualFree
HeapCreate
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetCommandLineA
GetDriveTypeA
FileTimeToLocalFileTime
ExitThread
TlsSetValue
CreateThread
RaiseException
GetSystemTime
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
SetEnvironmentVariableA

user32

GetWindowTextA
CharNextA
SetWindowsHookExA
MessageBoxA
LoadCursorA
UnhookWindowsHookEx
SetFocus
GetParent
SetWindowTextA
GetClassNameA
CallNextHookEx
GetFocus
SetForegroundWindow
wsprintfA
FindWindowExA
LoadStringA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

shell32

ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderPathA

ole32

CoTaskMemRealloc
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree

oleaut32

LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString
VariantCopy
VariantChangeType
VariantClear
SysAllocString

wininet

InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetSetCookieA
InternetOpenA
DeleteUrlCacheEntry

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e89b083be8cf54a77e89720319cff8ef

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 19KB

.SHARED Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 19KB

.SHARED
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 12KB - Virtual size: 11KB