50494a724f762ff229c95ce4ef985f2e[.]bin

General

Target
50494a724f762ff229c95ce4ef985f2e.bin
Size 273KB
Sample240429-bln39aec5s
SHA256 80744386b293a7de6214e8d1458917daa200f59f41c2f96546cc7805564efebd
MD5 856f5df0a00c20c63da1e91c631cf62a
SHA1 a6c560732ee31961e0e724edf1492e195c3cc70c
SHA512 15d764d11f1fed41c648b6bfceaf6e4fece1ae6b3f26c793fbd5090893f1233ab228fc5f383150d69d18d89eab37331b13952b5b1e24ad87d7c707a50cba1264
SSDEEP 6144:dQFkpk+2uzWoLA2jA0hK80QPYH/qviVrxZegC7fksAaplB/PQZ:dQFkpZWoqsK80QPYHiviVrxZegC7fwai
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/44076f98f8eb94de54ede47ed6d40d685eeab38606232b022f29996a2ab33cef.exe

File Explorer

50494a724f762ff229c95ce4ef985f2e.bin

.zip 273KB
44076f98f8eb94de54ede47ed6d40d685eeab38606232b022f29996a2ab33cef.exe

.exe 347KB

50494a724f762ff229c95ce4ef985f2e.bin

SHA256 80744386b293a7de6214e8d1458917daa200f59f41c2f96546cc7805564efebd
MD5 856f5df0a00c20c63da1e91c631cf62a
SHA1 a6c560732ee31961e0e724edf1492e195c3cc70c
SHA512 15d764d11f1fed41c648b6bfceaf6e4fece1ae6b3f26c793fbd5090893f1233ab228fc5f383150d69d18d89eab37331b13952b5b1e24ad87d7c707a50cba1264
SSDEEP 6144:dQFkpk+2uzWoLA2jA0hK80QPYH/qviVrxZegC7fksAaplB/PQZ:dQFkpZWoqsK80QPYHiviVrxZegC7fwai
MD5 SHA1 SHA512 SSDEEP

Password

infected

44076f98f8eb94de54ede47ed6d40d685eeab38606232b022f29996a2ab33cef.exe

IMPHASH 2f726f40370b375fa05d60fc38904442
SHA256 44076f98f8eb94de54ede47ed6d40d685eeab38606232b022f29996a2ab33cef
MD5 50494a724f762ff229c95ce4ef985f2e
SHA1 3de884af9f3e790d1a4e175c79fcbc890fcd048a
SHA512 dfbdee6197a40dd60bc061db248243677783f7b1e6994c7ac15e3493b5ff6a3def8dddfa6975142da4efe83a8b8feaa6c049f96c4a15a25cb3dd56bf1f8042da
SSDEEP 6144:8o+4WgjZb/JFOtrrcQfDowFsTPgZvaRGbmDgAsWrJhUN5m8BOP:5ZjZb/JfQboRTAvaYykBAfFP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetModuleHandleW GetProcessHeap ReadConsoleW GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW GetProcAddress GetLocaleInfoA SetFileAttributesA LoadLibraryA SetConsoleCtrlHandler SetConsoleDisplayMode SetCurrentDirectoryW SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA ScrollConsoleScreenBufferA FindAtomW SetStdHandle EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing