aa7554fb38eb05288f7a74735999e920[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

aa7554fb38eb05288f7a74735999e920.bin
Size

5KB
MD5

8f7225ac8b7fc494faca986475a60ebc
SHA1

5675cc5e55f9d922303a24fb7f254a0ecd5fe060
SHA256

fe7d393c7c17314f4e6224f480be33c1bde5fb6328e35d7e0b85e0e9f291c60a
SHA512

8482df7dce097c1c4504d6377bcf815502c9bc3fbca0403cf4b8d46dd150b923c7f912a2687df7b68a7362b3e9b77e81e4eba44fee60fbc807d2f462e20d67ea
SSDEEP

96:TCna7DlBKisNB9C08QWVmKHAqMO49LuN0dHSlsai74s+4PgT0aVxcBOGACnS:TCaai8CHVm21MtL6ASlrJJ4ATccBCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/96cf74926856e25b18f6c12c13e8093200a0b89db345ad0511c77659d0d25f1f.dll

Files

aa7554fb38eb05288f7a74735999e920.bin
.zip

Password: infected
96cf74926856e25b18f6c12c13e8093200a0b89db345ad0511c77659d0d25f1f.dll
.dll windows:4 windows x86 arch:x86

Password: infected

e9e98df639c35c794fd44c3163bacf7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetLastError
GetModuleHandleA
InitializeCriticalSection
K32GetModuleInformation
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WriteProcessMemory

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
realloc
strlen
strncmp
vfprintf

Exports

Exports

EnAPMDataRepSubmitReport
EnAnrDumpRepExceptionFilter
EnAnrDumpRepSubmitReport
EnCrashRepClearInfo
EnCrashRepCreateDumpFile
EnCrashRepCreateStackFile
EnCrashRepExceptionFilter
EnCrashRepSetDeviceId
EnCrashRepSetInfo
EnCrashRepSetOptions
EnCrashRepSetOptionsEx
EnCrashRepSubmitReport
EnCrashRepSubmitReportEx
EnCrashSvnRevision
EnGetAnrDumpFileName
EnSetSyncHostServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

e9e98df639c35c794fd44c3163bacf7b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 36B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 112B

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 808B

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 512B - Virtual size: 460B

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 36B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 112B

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 808B

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 512B - Virtual size: 460B