228b2ade861c2311b51a3c705b7b35a0[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

228b2ade861c2311b51a3c705b7b35a0.bin
Size

203KB
MD5

228b2ade861c2311b51a3c705b7b35a0
SHA1

945287a42cd2fe293a0ca20dd37539219e7258c2
SHA256

58dfb89522528af03ac169a6bcfa154385e043ec5a539f5eac130fab7249463a
SHA512

edafd6c6b94277d8e313239025b2691439150711ac77a4b6d877891d81e13b1305eeb1c916dff64da06b9d5036f425f4eb0d58a617a43f2576195ed5e227a28b
SSDEEP

6144:JEL1lvsWYuOiMnGNuuF8XcfI2MPO7qhnhF9mD:YnksHxyXcfIRhFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
228b2ade861c2311b51a3c705b7b35a0.bin

Files

228b2ade861c2311b51a3c705b7b35a0.bin
.exe windows:4 windows x86 arch:x86

dec3dee9869bb0d71498fbbf0d597bb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
MoveFileW
GetLogicalDrives
WinExec
SearchPathW
GetACP
GetModuleHandleA
CreateDirectoryW
CompareStringA
GetEnvironmentStringsA
lstrcmpA
ExpandEnvironmentStringsA
SuspendThread
lstrcmpi
GetHandleInformation
lstrcatA
GetStringTypeW
CreateSemaphoreA
GetProcAddress
EnumTimeFormatsA
GetSystemDefaultLCID
GetNamedPipeInfo
GetCurrentThreadId
GetNumberFormatA
IsBadStringPtrA
GetModuleFileNameA

user32

DrawTextW
GetMessageW
OffsetRect
DialogBoxParamA
SendMessageW
CreateDialogIndirectParamW
LoadBitmapA
SetForegroundWindow
GetDlgItem
MonitorFromPoint
FindWindowW
WaitForInputIdle
CreateWindowExA
MoveWindow
SetWindowTextA
CharUpperA
GetDC
UpdateWindow
UnregisterClassA
GetKeyboardType
ShowWindow
GetClassInfoW
RegisterClassExW
CharNextA
CreateWindowExW
IsDlgButtonChecked
mouse_event
PostMessageA
RegisterClassExA
SetCursorPos
GetMenuItemInfoA
wvsprintfA
CharUpperW
GetCursorPos
GetSystemMetrics
CreateDialogParamA
GetIconInfo
ArrangeIconicWindows
DefWindowProcW
GetClassNameW
GetClassInfoExA

gdi32

BitBlt
GetTextMetricsW
CreateMetaFileW
GetEnhMetaFileA
CreateMetaFileA
EnumFontFamiliesExA
ResizePalette
FlattenPath
CreateFontIndirectW
OffsetClipRgn
GetCharABCWidthsI
SetMapperFlags
RestoreDC
TranslateCharsetInfo
SetBrushOrgEx
GetEnhMetaFileDescriptionA
PtInRegion

advapi32

RegQueryValueW
RegSaveKeyW
RegOpenKeyW
RegRestoreKeyW
RegFlushKey
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegEnumValueW
RegCreateKeyExW

shlwapi

PathParseIconLocationW
UrlGetLocationW
PathFileExistsW
AssocQueryStringA
UrlCreateFromPathW
PathUndecorateA
StrCmpNIA
PathIsFileSpecW

Sections

.qtJ
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tc
Size: 3KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VXtI
Size: 3KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.B
Size: 4KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 103KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 4KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dec3dee9869bb0d71498fbbf0d597bb9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.qtJ Size: 11KB - Virtual size: 11KB

.tc Size: 3KB - Virtual size: 48KB

.VXtI Size: 3KB - Virtual size: 205KB

.B Size: 4KB - Virtual size: 235KB

.data Size: 103KB - Virtual size: 418KB

.M Size: 4KB - Virtual size: 479KB

.rsrc Size: 72KB - Virtual size: 71KB

.reloc Size: 1024B - Virtual size: 824B

.qtJ
Size: 11KB - Virtual size: 11KB

.tc
Size: 3KB - Virtual size: 48KB

.VXtI
Size: 3KB - Virtual size: 205KB

.B
Size: 4KB - Virtual size: 235KB

.data
Size: 103KB - Virtual size: 418KB

.M
Size: 4KB - Virtual size: 479KB

.rsrc
Size: 72KB - Virtual size: 71KB

.reloc
Size: 1024B - Virtual size: 824B