78E[.]tmp[.]bin[.]zip

General

Target
78E.tmp.bin.zip
Size 300KB
Sample240417-2k5byshe9z
SHA256 38330659bfcb85a1cb55513c3fa974ea970bb403f4e86a6d0b3914b8a10fb52e
MD5 2c65d3a0c7eb2d47e963adc8570435dc
SHA1 8de584af45b9cf6c1e0cd04664e86cd34a1af760
SHA512 ebdfa335bef0d355ee193a15be953574da681a4586a2e519fc27cb09bb03ef7382b08eac0a1fafb8e15a8af165eb3d65f2555a56cf779373585b14cd6df595a4
SSDEEP 6144:tDlZEboXBTgf0jw72lh1bhUaxEsaaXaoU0DiONZwl:Rl6bglRXVhVfaLN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/78E.tmp.bin

File Explorer

78E.tmp.bin.zip

.zip 300KB
78E.tmp.bin

.exe 466KB

78E.tmp.bin.zip

SHA256 38330659bfcb85a1cb55513c3fa974ea970bb403f4e86a6d0b3914b8a10fb52e
MD5 2c65d3a0c7eb2d47e963adc8570435dc
SHA1 8de584af45b9cf6c1e0cd04664e86cd34a1af760
SHA512 ebdfa335bef0d355ee193a15be953574da681a4586a2e519fc27cb09bb03ef7382b08eac0a1fafb8e15a8af165eb3d65f2555a56cf779373585b14cd6df595a4
SSDEEP 6144:tDlZEboXBTgf0jw72lh1bhUaxEsaaXaoU0DiONZwl:Rl6bglRXVhVfaLN
MD5 SHA1 SHA512 SSDEEP

Password

infected

78E.tmp.bin

IMPHASH 859ea9b82a80f048456c437967082433
SHA256 9c17cc38feddc8aec42f4d7e84ff85260e0e5d955c38e42573a21c18836c7a59
MD5 246d6fa957bd9bd9bd444ba8a6c38457
SHA1 fb90a2e9e3f3d4bf350a5c8d475c843f072bc1f5
SHA512 95e3135f417fdfd91c8e57545c246c5a0f5efc40fe1e3ef745b8283c35b156d7814934be5983dd5532b7fb789a4032a3e1d619281d0e4e1b465b86f2a036e3bb
SSDEEP 6144:agBl9KO2wSlnYlm8px3b3RY+F2q9QgW6jw5oJ48ph1nt2EuqAs00:aEKOZSlnbE3b3RiqW6jw5o6831/A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

22237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessAffinityMask GetLocaleInfoA GetModuleHandleW GetPrivateProfileStringW LoadLibraryW WriteConsoleOutputA GetStringTypeExW lstrlenW GetProcAddress LocalAlloc HeapLock GetModuleFileNameA GetOEMCP OpenFileMappingW WriteConsoleOutputAttribute InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetModuleHandleA LoadLibraryA GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile

msimg32

AlphaBlend

Sharing