05ca61bfbf3f221b840b7189bfcac400[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
05ca61bfbf3f221b840b7189bfcac400.bin
Size 1.2MB
Sample240511-bgm1dsfa85
SHA256 090ffc8cb5e3b1972484f59fae222237268c4dfea64d05c4277eaa26578bb95f
MD5 05ca61bfbf3f221b840b7189bfcac400
SHA1 b4fc6ac11adccc0b1c4c0180f2f24eff70368375
SHA512 fd1903159d1cd462702740227d9c811ca0caffe0f3f5f23b09cced70dbe50b2643f8bda668f2ed2540f00c822ff2bd31cec7c4bb6e6d3b8a0b483786691dce09
SSDEEP 24576:Z6G1Vnojg2yNRXTkcCCZM82bCrNmXhvzOq+6:UGTojxyNJTNCCZBusmXhvt+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05ca61bfbf3f221b840b7189bfcac400.bin

File Explorer

05ca61bfbf3f221b840b7189bfcac400.bin

.exe 1.2MB

05ca61bfbf3f221b840b7189bfcac400.bin

IMPHASH 98e1b17527b60a4e1da58dcb6a33424e
SHA256 090ffc8cb5e3b1972484f59fae222237268c4dfea64d05c4277eaa26578bb95f
MD5 05ca61bfbf3f221b840b7189bfcac400
SHA1 b4fc6ac11adccc0b1c4c0180f2f24eff70368375
SHA512 fd1903159d1cd462702740227d9c811ca0caffe0f3f5f23b09cced70dbe50b2643f8bda668f2ed2540f00c822ff2bd31cec7c4bb6e6d3b8a0b483786691dce09
SSDEEP 24576:Z6G1Vnojg2yNRXTkcCCZM82bCrNmXhvzOq+6:UGTojxyNJTNCCZBusmXhvt+
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

238548

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CLSIDFromString IIDFromString StringFromGUID2 OleRun CoInitialize CoTaskMemRealloc CoTaskMemFree CoCreateInstance CoUninitialize CoTaskMemAlloc

shell32

Shell_NotifyIconA ShellExecuteA SHGetFolderPathW

wininet

InternetTimeFromSystemTime InternetTimeToSystemTime InternetCrackUrlA HttpQueryInfoA HttpOpenRequestA InternetErrorDlg InternetOpenA InternetCloseHandle HttpSendRequestA InternetConnectA InternetReadFile

user32

GetDesktopWindow CreatePopupMenu ShowWindow MessageBoxA DispatchMessageW SetWindowLongA TrackPopupMenu wsprintfA CharNextA GetCursorPos SetForegroundWindow IsWindowUnicode PostQuitMessage PeekMessageA AppendMenuA TranslateMessage CreateWindowExA DefWindowProcA RegisterClassA GetWindowLongA GetMessageW GetMessageA LoadImageA DispatchMessageA DestroyWindow LoadStringA PostMessageA GetSystemMetrics MsgWaitForMultipleObjectsEx

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueW

kernel32

RtlUnwind InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetLocaleInfoW GetSystemInfo CompareStringW EncodePointer GetModuleHandleW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc SwitchToThread GetStringTypeW VirtualAlloc VirtualProtect VirtualQuery GetFileType GetConsoleCP GetConsoleMode CreateDirectoryW LCMapStringW GetDriveTypeW GetFileInformationByHandle GetFullPathNameW SetStdHandle GetModuleFileNameW GetModuleFileNameA SizeofResource LoadLibraryExA WaitForMultipleObjects InitializeCriticalSectionAndSpinCount FindResourceA lstrlenA CreateMutexA WaitForSingleObject lstrcmpA lstrcatA GetModuleHandleA GetCommandLineA MultiByteToWideChar GetLastError SetDllDirectoryA CloseHandle RaiseException IsDBCSLeadByte LoadResource DecodePointer GetProcAddress GetStdHandle FreeLibrary WideCharToMultiByte lstrcmpiA SystemTimeToTzSpecificLocalTime CreateEventA SetEvent lstrcpyA CreateThread ResetEvent lstrcpynA OpenEventA WriteFile Sleep CreateFileA GetCurrentProcess GetTempPathA GetVersionExA DeleteFileA LocalFree ReadFile FileTimeToSystemTime SetHandleInformation TerminateProcess CreatePipe PeekNamedPipe CreateProcessA GetExitCodeProcess FindClose LocalAlloc GetSystemDirectoryA LoadLibraryA LockResource ExitProcess FormatMessageA GetCurrentThreadId FormatMessageW GetLocalTime GetCurrentProcessId SetEndOfFile SetFilePointerEx GetCommandLineW GetModuleHandleExW GetNativeSystemInfo GetSystemDefaultUILanguage GetThreadLocale GetUserDefaultUILanguage SetLastError GetFileAttributesA OpenMutexA LoadLibraryExW GetModuleHandleExA LoadLibraryW CreateFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection IsDebuggerPresent OutputDebugStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc HeapFree HeapSize HeapReAlloc GetTimeZoneInformation GetFileSizeEx FlushFileBuffers ReadConsoleW GetCurrentDirectoryW FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap WriteConsoleW DeleteCriticalSection

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW RegEnumKeyA CryptAcquireContextA RegQueryValueExA CryptCreateHash CryptHashData CryptDestroyHash CryptGetHashParam CryptReleaseContext SetSecurityDescriptorDacl InitializeSecurityDescriptor RegNotifyChangeKeyValue RegCloseKey RegQueryInfoKeyW RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegDeleteValueA RegEnumKeyExA

oleaut32

SysAllocString VariantInit GetErrorInfo SysStringByteLen VarUI4FromStr SysFreeString VariantClear VariantChangeType

shlwapi

ord12

gdi32

GetStockObject

crypt32

CryptProtectData CryptUnprotectData CryptStringToBinaryA CryptBinaryToStringA

msi

ord160 ord31 ord168 ord91 ord137 ord189 ord159 ord115 ord141 ord117 ord44 ord204 ord67 ord8 ord158