84e5ccdfbdfd9d92456c890e6d8641d4[.]bin

General

Target
84e5ccdfbdfd9d92456c890e6d8641d4.bin
Size 666KB
Sample240221-dxt5raba86
SHA256 7bf87cd2236c39a2b1648a648e8074858d5c10731ff316b5897fd92ba5710b7b
MD5 babe436ca4d62fa8f2b871f7e8e14361
SHA1 7cfeeb4911f5959b630c76ddede6ef5ef7f7c405
SHA512 2001236b281499e8bc531c48f1ea00497df14fe7aebca30906f9fa541c0de172942b8f3c260b41e0dfa5fcbcca7518db88b8dc797555773697d625f080c9ad65
SSDEEP 12288:f/tbqN58HZKEToCUsLhxjbXrtp+bY7ZoqBe3dSoGGAgVoZ6Qz6dnWTO7Nby7Ab/:f/V885xToEbKcSd/GGAgVokfWTO4Ab
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc.exe

File Explorer

84e5ccdfbdfd9d92456c890e6d8641d4.bin

.zip 666KB
d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc.exe

.exe 793KB

84e5ccdfbdfd9d92456c890e6d8641d4.bin

SHA256 7bf87cd2236c39a2b1648a648e8074858d5c10731ff316b5897fd92ba5710b7b
MD5 babe436ca4d62fa8f2b871f7e8e14361
SHA1 7cfeeb4911f5959b630c76ddede6ef5ef7f7c405
SHA512 2001236b281499e8bc531c48f1ea00497df14fe7aebca30906f9fa541c0de172942b8f3c260b41e0dfa5fcbcca7518db88b8dc797555773697d625f080c9ad65
SSDEEP 12288:f/tbqN58HZKEToCUsLhxjbXrtp+bY7ZoqBe3dSoGGAgVoZ6Qz6dnWTO7Nby7Ab/:f/V885xToEbKcSd/GGAgVokfWTO4Ab
MD5 SHA1 SHA512 SSDEEP

Password

infected

d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc.exe

IMPHASH fe67952be52176c9a9a2c455c047beed
SHA256 d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc
MD5 84e5ccdfbdfd9d92456c890e6d8641d4
SHA1 bc1f99c3a86a6a3258e6baa57c26be3a4403146e
SHA512 5f57e132b811e83f167f4b624397262b83982c9781dd05cba20bd2de798fcf1fd010c268060fcdf5601d5c2af1d4a61c2ff8a3ed659a25ceb6a3ef1034b8cf4c
SSDEEP 12288:wtoRocpobWxvcSJj1LT0K85JMR8LNp/tOtMqMXwe/47FXtqtAlkdyiV/M3f:wtlca6F7JHkNp/tOteXvA76Slkdyzf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

5

Entry point

8819

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hipaxiya-husagi\wivagi\honacet\kaxex.pdb

kernel32

AddConsoleAliasW GetComputerNameW CreateDirectoryExA GetFileAttributesExA GetTickCount GetNumberFormatA GetConsoleTitleA GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW GetConsoleAliasW WriteConsoleW InterlockedCompareExchange GetProcAddress VirtualAlloc HeapSize VerLanguageNameA RemoveDirectoryA SetComputerNameA LoadLibraryA GetFileType SetFileApisToANSI EnumResourceTypesW GetModuleHandleA CreateWaitableTimerW GetCurrentProcessId GetVolumeInformationW CreateFileA QueryDosDeviceA InterlockedDecrement SetLastError GetTempFileNameW GetCommandLineA GetStartupInfoA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError Sleep ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile SetStdHandle GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle

user32

EnableWindow CharUpperBuffW

advapi32

DeregisterEventSource DeleteAce AreAllAccessesGranted

Sharing