04846dc5508416f587d93cf835520d8a[.]bin

General

Target
04846dc5508416f587d93cf835520d8a.bin
Size 2.1MB
Sample240415-bcnfcsac42
SHA256 1f4c0ffe6a465dc997b31c9e15c9706caf6e2c712ef219e3137fbb03586d3dbf
MD5 cdcf73aff24ec015ecd2f02d0f3582c0
SHA1 669718307c72bbf810ae1b20135137855ed493a5
SHA512 e6a8fb7ae4fc68dab9d80373747db9490769b417be26432fd06afd7bcebeb795792b11702064b8cac42fcf11f7f0dbfd0f8900dc5ac0cf353c4cc7ddf3190cf2
SSDEEP 49152:k2lnw6H/qQCd03RJrwCPowYI3XhgfsKasHQreKb3rsG0PU:k2a6H/5wIRJowQfshQQeKspPU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4c83fa749481d0d8549034facf59317f713674625c990e83dcb6ec3e00fc2447.exe

File Explorer

04846dc5508416f587d93cf835520d8a.bin

.zip 2.1MB
4c83fa749481d0d8549034facf59317f713674625c990e83dcb6ec3e00fc2447.exe

.exe 2.2MB

04846dc5508416f587d93cf835520d8a.bin

SHA256 1f4c0ffe6a465dc997b31c9e15c9706caf6e2c712ef219e3137fbb03586d3dbf
MD5 cdcf73aff24ec015ecd2f02d0f3582c0
SHA1 669718307c72bbf810ae1b20135137855ed493a5
SHA512 e6a8fb7ae4fc68dab9d80373747db9490769b417be26432fd06afd7bcebeb795792b11702064b8cac42fcf11f7f0dbfd0f8900dc5ac0cf353c4cc7ddf3190cf2
SSDEEP 49152:k2lnw6H/qQCd03RJrwCPowYI3XhgfsKasHQreKb3rsG0PU:k2a6H/5wIRJowQfshQQeKspPU
MD5 SHA1 SHA512 SSDEEP

Password

infected

4c83fa749481d0d8549034facf59317f713674625c990e83dcb6ec3e00fc2447.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 4c83fa749481d0d8549034facf59317f713674625c990e83dcb6ec3e00fc2447
MD5 04846dc5508416f587d93cf835520d8a
SHA1 a3208669e2ada3896567d0acb07fc29ff68c3358
SHA512 e9110a82691a7ac800f6d93d2aff96c5ed0f768dce29e4d8df99ce48515ef45a25d4843d3c97f3e9814c03406fea1fcf5d601b276139a870f1241c645e21812e
SSDEEP 49152:PSUl6vD5DxN6HHLJFwkXeUND1XvwRpJrI1BblT6j/WHt12fdDD:PSSwD5DxkSgwJrI1QIT2fdDD
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

6

Entry point

5804032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

591KB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

plzndgzq

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

imnknifl

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

04846dc5508416f587d93cf835520d8a.bin

4c83fa749481d0d8549034facf59317f713674625c990e83dcb6ec3e00fc2447.exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

04846dc5508416f587d93cf835520d8a.bin

4c83fa749481d0d8549034facf59317f713674625c990e83dcb6ec3e00fc2447.exe

kernel32

generic