ae13c23cad4370cdaaaa690a8a7e3c14[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

ae13c23cad4370cdaaaa690a8a7e3c14.bin
Size

1.4MB
MD5

9124456683a357b8bb5567983165fc5b
SHA1

6c098ab3fcbfdb7e14a954407de23e7a6473886b
SHA256

ab09f1983924a0fef4eb75b239a402e1adad8ffb8f80f1fbef0b76289749401f
SHA512

644343f1d7dd2ebccd615e2869482f0b5579a16b9318dedd15e5b8e2b81df9c896a478437381bfba2e0056c54d1f65af2b29bcf6048d31baf0a3bc8117db3a57
SSDEEP

24576:p+hsTmIeau35A+X4FeAeEB6EtavZ5JO6R0iuobLp/RaPWdFyF9lyek0ZOvcokpcq:pMUZu3bIs+BzwZ3O6R3ppaCyFTtycfxV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882.exe

Files

ae13c23cad4370cdaaaa690a8a7e3c14.bin
.zip

Password: infected
1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882.exe
.exe windows:6 windows x64 arch:x64

Password: infected

e03c67dc1555404d61b3dc09454d4ca5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapCreate
LoadLibraryA
GetProcAddress
GetModuleHandleA
WriteConsoleW
CloseHandle
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx

gdi32

PlayMetaFile
GdiFlush
SetBitmapDimensionEx
ScaleViewportExtEx
OffsetWindowOrgEx
Arc
BitBlt
Chord
CombineRgn
CopyMetaFileW
CreateHatchBrush
EnumFontFamiliesW
EqualRgn
GetBkColor
GetDCBrushColor
GetCharWidthW
GetMetaRgn
GetCurrentObject
GetCurrentPositionEx
GetPixel
GetStockObject
GetTextAlign
GetTextExtentPoint32W
GetGlyphIndicesW
GetViewportOrgEx
IntersectClipRect
PlgBlt
GetObjectW
ResizePalette
SetDCBrushColor
SetBoundsRect
SetDIBits
SetMetaFileBitsEx
SetPaletteEntries
StretchBlt
PlayMetaFileRecord
EnumEnhMetaFile
GetEnhMetaFileDescriptionW
GetWinMetaFileBits
PlayEnhMetaFileRecord
PolyPolyline
GetDIBColorTable
GetColorAdjustment
SelectClipPath
StrokePath
GetMiterLimit
GetArcDirection
MoveToEx

shell32

Shell_NotifyIconW
SHBrowseForFolderW
ord75

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

e03c67dc1555404d61b3dc09454d4ca5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

shell32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 241KB - Virtual size: 241KB

.data Size: 208KB - Virtual size: 232KB

.pdata Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 241KB - Virtual size: 241KB

.data
Size: 208KB - Virtual size: 232KB

.pdata
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB