ea8b223863892068e3cfab601caf53d4.bin
- SHA256 0a8179645699cf33b1be55dba1a7943ef2b53b9603018dc3fdc6dab67953e3de
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4ed2368fc3e3030a3da9930cb430b80d4611baf0a0451efe3f9e02b25ccd493d.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ed2368fc3e3030a3da9930cb430b80d4611baf0a0451efe3f9e02b25ccd493d.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
6 signatures
150 seconds
General
- Target ea8b223863892068e3cfab601caf53d4.bin
- Size 411KB
- Sample240428-cfehasdg32
- SHA256 0a8179645699cf33b1be55dba1a7943ef2b53b9603018dc3fdc6dab67953e3de
- MD5 cde970f84c558946c3a4dc67ab34c498
- SHA1 0c76b44f813b8460c724c7998649650c3d0f7052
- SHA512 abef8cc1331b274eea3ff2388e67361852359917810ba5568f1322b708cbcfd8b64327c98d6d14ad109482f9fb75b894f67a726be600b80b0281bb693adaafa0
- SSDEEP 12288:oCaxyX4YJKBPiwm4Lg9pSpWCknZnuS2yu/GG2LM:pX4bKwm4Grp92OM
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4ed2368fc3e3030a3da9930cb430b80d4611baf0a0451efe3f9e02b25ccd493d.exe
File Explorer
-
ea8b223863892068e3cfab601caf53d4.bin.zip 411KB
-
4ed2368fc3e3030a3da9930cb430b80d4611baf0a0451efe3f9e02b25ccd493d.exe.exe 496KB
4ed2368fc3e3030a3da9930cb430b80d4611baf0a0451efe3f9e02b25ccd493d.exe
- IMPHASH 17c87c2ceba06a933957d5cd67f1cd22
- SHA256 4ed2368fc3e3030a3da9930cb430b80d4611baf0a0451efe3f9e02b25ccd493d
- MD5 ea8b223863892068e3cfab601caf53d4
- SHA1 d94660b1fc88c44fddf2b330e9628b38c9e7d8d0
- SHA512 c2e615cf996015fe3eb04ebdb345e1cad04e73850e77bc9d9ee3dee919cf10f3bb8d323d98c9d02b80cc1687cb69f8e82a5ec350ba3ef73fbdccb2be3d43d11a
- SSDEEP 12288:1dy0t/5TvliKBBV06Eqj7o38LjxixclXtKIN2rYoPlD6y:f/5jl7mEoKt9N2FR6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
26862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
Sleep
VirtualProtect
FreeConsole
CloseHandle
WaitForSingleObjectEx
GetCurrentThreadId
GetExitCodeThread
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
QueryPerformanceCounter
ReleaseSRWLockExclusive
WakeAllConditionVariable
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WriteConsoleW
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetFileType
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
ReadConsoleW
HeapSize
CreateFileW
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.bss
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bsS
Size
305KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=29395,
count=172, id=261, version=29395,
count=21, id=260, version=29395,
count=3, id=257, version=29395,
count=123, id=1, productName=Unmarked objects,
count=18, id=260, version=33218,
count=21, id=259, version=33218,
count=84, id=261, version=33218,
count=1, id=261, version=33523,
count=1, id=255, version=33523,
count=1, id=258, version=33523,