2ccebda1479aa06c1ab85584226fe85f[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

2ccebda1479aa06c1ab85584226fe85f.bin
Size

25.0MB
MD5

120b61ae6f3132cf361a1d4526e12a09
SHA1

0e255477c8af6b0882b9112ca411ab69fb4c7d90
SHA256

7f86dd5441bebc254c6c87a4ca7d3c049ab5f52e2133174f2d54de1c31a0808b
SHA512

19e3bb5d40d9635a92cda2880a83126ae2c1d1daf853a03082ae720ba8514f48a4d1713ccea4756429f62d275783a559293f38b14798085f4fe6171d5dffa07e
SSDEEP

393216:FRuV/jhUvgJJ1+du4X4IgK3qisjzpqVKdnKSPZUyW03rgtBMeq0RT12S3:Lqbhuggu4YKaiy9cWnKYHWPMeJJV3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bb9c03d87ab4020bcdd47bf009d3a321666052c24e6735beef7c6a6aa3125ade.exe

Files

2ccebda1479aa06c1ab85584226fe85f.bin
.zip

Password: infected
bb9c03d87ab4020bcdd47bf009d3a321666052c24e6735beef7c6a6aa3125ade.exe
.dll windows:6 windows x64 arch:x64

Password: infected

07aaa135fdce635110fc1987da8e6e91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mpr

WNetEnumResourceW

winmm

timeGetTime

d3d9

Direct3DCreate9

winspool.drv

DocumentPropertiesW

comdlg32

FindTextW

comctl32

ImageList_GetImageInfo

shell32

DragQueryFileW

user32

CopyImage

version

GetFileVersionInfoSizeW

oleaut32

GetErrorInfo

advapi32

RegSetValueExW

msvcrt

isupper

kernel32

GetVersion
GetVersionExW

wsock32

gethostbyaddr

ole32

RevokeDragDrop

gdi32

Pie

magnification

MagSetWindowSource

Exports

Exports

ClearReportsBetween_ExportThunk
CrashForException_ExportThunk
DisableHook
DrainLog
DumpHungProcessWithPtype_ExportThunk
DumpProcessWithoutCrash
GetApplyHookResult
GetBlockedModulesCount
GetCrashReports_ExportThunk
GetCrashpadDatabasePath_ExportThunk
GetHandleVerifier
GetInstallDetailsPayload
GetUniqueBlockedModulesCount
GetUserDataDirectoryThunk
InjectDumpForHungInput_ExportThunk
IsBrowserProcess
IsExtensionPointDisableSet
IsThirdPartyInitialized
RegisterLogNotification
RequestSingleCrashUpload_ExportThunk
SetMetricsClientId
SetUploadConsent_ExportThunk
SignalChromeElf
SignalInitializeCrashReporting
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: - Virtual size: 12.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 544KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.6+l
Size: - Virtual size: 610KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jx]
Size: - Virtual size: 16.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.x@%
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zjN
Size: 27.9MB - Virtual size: 27.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

07aaa135fdce635110fc1987da8e6e91

Headers

DLL Characteristics

File Characteristics

Imports

mpr

winmm

d3d9

winspool.drv

comdlg32

comctl32

shell32

user32

version

oleaut32

advapi32

msvcrt

kernel32

wsock32

ole32

gdi32

magnification

Exports

Exports

Sections

.text Size: - Virtual size: 12.4MB

.data Size: - Virtual size: 1.1MB

.bss Size: - Virtual size: 544KB

.idata Size: - Virtual size: 22KB

.didata Size: - Virtual size: 37KB

.edata Size: - Virtual size: 962B

.rdata Size: - Virtual size: 69B

.6+l Size: - Virtual size: 610KB

.pdata Size: - Virtual size: 630KB

.jx] Size: - Virtual size: 16.8MB

.x@% Size: 512B - Virtual size: 328B

.zjN Size: 27.9MB - Virtual size: 27.9MB

.rsrc Size: 1024B - Virtual size: 612B

.reloc Size: 512B - Virtual size: 228B

.text
Size: - Virtual size: 12.4MB

.data
Size: - Virtual size: 1.1MB

.bss
Size: - Virtual size: 544KB

.idata
Size: - Virtual size: 22KB

.didata
Size: - Virtual size: 37KB

.edata
Size: - Virtual size: 962B

.rdata
Size: - Virtual size: 69B

.6+l
Size: - Virtual size: 610KB

.pdata
Size: - Virtual size: 630KB

.jx]
Size: - Virtual size: 16.8MB

.x@%
Size: 512B - Virtual size: 328B

.zjN
Size: 27.9MB - Virtual size: 27.9MB

.rsrc
Size: 1024B - Virtual size: 612B

.reloc
Size: 512B - Virtual size: 228B