456a86d30c8506883a00bbafc9ab9ec3.bin
- SHA256 fb72ea1d08f89e20980a8052076d1048659ea739ca6293a2b218d6811624b7ca
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9dc2cde8d123fbc1141cf3e4e47574ec0c7ed6d57e8815a7a5935a4427b803aa.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
9dc2cde8d123fbc1141cf3e4e47574ec0c7ed6d57e8815a7a5935a4427b803aa.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
12 signatures
150 seconds
General
- Target 456a86d30c8506883a00bbafc9ab9ec3.bin
- Size 409KB
- Sample240503-blgdeadd26
- SHA256 fb72ea1d08f89e20980a8052076d1048659ea739ca6293a2b218d6811624b7ca
- MD5 27a61be5b4e70ac9b762c2d917d1e293
- SHA1 ec705b2e19a8d9c6f3259a6a3bab03c5aa4239ce
- SHA512 caf9a6023d0a60ac18f48455429630e785157f02481e85a7596f44d8b2f724f4f7960769f0e5489e95cc250f3ac34f647083efa3501402e15a4bb7a16710171a
- SSDEEP 12288:r95L5SKpbnY6jB7jSleqtvnnKkXe3RRa8QsAv9:7TpbnYsvMtt/nK7pqF
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9dc2cde8d123fbc1141cf3e4e47574ec0c7ed6d57e8815a7a5935a4427b803aa.exe
File Explorer
-
456a86d30c8506883a00bbafc9ab9ec3.bin.zip 409KB
-
9dc2cde8d123fbc1141cf3e4e47574ec0c7ed6d57e8815a7a5935a4427b803aa.exe.exe 500KB
9dc2cde8d123fbc1141cf3e4e47574ec0c7ed6d57e8815a7a5935a4427b803aa.exe
- IMPHASH 066b3961cf946888949dd23c4793afa4
- SHA256 9dc2cde8d123fbc1141cf3e4e47574ec0c7ed6d57e8815a7a5935a4427b803aa
- MD5 456a86d30c8506883a00bbafc9ab9ec3
- SHA1 f58d3f0c7f03f05e22998662e255e155bd8a74a4
- SHA512 4a3da93186fd6d33d14daf61955d253fc20b03c38e2a571dbda40f1b8ee0078bcb101fca11ead2e8087cfe5515e397c5343de37c8e4c1111506b44e33a049162
- SSDEEP 12288:724IFZdYVs8JwAoq5VxxXK5hVA4kUF4aHpzXoXREuPi:JIhYVPoq5lXK5hVrk87joXf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
25008
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
gdi32
GetClipBox
ScriptPositionSingleGlyph
D3DKMTDestroyContext
DDCCISetVCPFeature
EqualRgn
BRUSHOBJ_pvGetRbrush
D3DKMTGetContextSchedulingPriority
D3DKMTCreateDevice
kernel32
WaitForSingleObject
CreateRemoteThread
VirtualProtect
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
CreateFileW
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
HeapSize
WriteConsoleW
Name
.text
Size
134KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.bss
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Right
Size
305KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
8KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=12, id=259, version=29395,
count=169, id=261, version=29395,
count=21, id=260, version=29395,
count=18, id=260, version=33218,
count=20, id=259, version=33218,
count=5, id=257, version=29395,
count=91, id=1, productName=Unmarked objects,
count=78, id=261, version=33218,
count=1, id=261, version=33523,
count=1, id=258, version=33523,