eda1c0b605038654023f73f0956f3790[.]exe[.]bin[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
eda1c0b605038654023f73f0956f3790.exe.bin.exe
Size 384KB
Sample240518-t4cr2sch46
SHA256 9a79d7d966b8c7ad7e3c3dd8303a821197ddee0ee8b481e0461e72370721f7c0
MD5 eda1c0b605038654023f73f0956f3790
SHA1 3a8034cc8e59abe1932ec8a8ff327ac27113f649
SHA512 9bcaaf53f8c4dec3cd58e0f9b4098178684b6a7bf50e4c67dd6bf8462f840a746585f1eb0ad01e3df51d79523fcd308cd4b0ffea3576824a3bcc645bcb3f951b
SSDEEP 6144:dcLYfNP/QZmz33CuOgaYpHVb234vVbgOOUWEPdCQQed7UhDfao8:Z9r3CuOgaY9ViovVbgOUEPFQeuS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eda1c0b605038654023f73f0956f3790.exe.bin.exe

File Explorer

eda1c0b605038654023f73f0956f3790.exe.bin.exe

.exe 384KB

eda1c0b605038654023f73f0956f3790.exe.bin.exe

IMPHASH ac85976f05f90c893d0e2c585741468c
SHA256 9a79d7d966b8c7ad7e3c3dd8303a821197ddee0ee8b481e0461e72370721f7c0
MD5 eda1c0b605038654023f73f0956f3790
SHA1 3a8034cc8e59abe1932ec8a8ff327ac27113f649
SHA512 9bcaaf53f8c4dec3cd58e0f9b4098178684b6a7bf50e4c67dd6bf8462f840a746585f1eb0ad01e3df51d79523fcd308cd4b0ffea3576824a3bcc645bcb3f951b
SSDEEP 6144:dcLYfNP/QZmz33CuOgaYpHVb234vVbgOOUWEPdCQQed7UhDfao8:Z9r3CuOgaY9ViovVbgOUEPFQeuS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

119251

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\documents and settings\administrator\桌面\hotfix_install\release\Hotfix_install.pdb

kernel32

GetFileAttributesW GetFileTime HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind ExitProcess RaiseException HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter IsDebuggerPresent Sleep GetCPInfo GetACP GetOEMCP GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA FileTimeToLocalFileTime GetTickCount FileTimeToSystemTime SetErrorMode CreateFileW GetFullPathNameW GetVolumeInformationW GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale lstrlenA InterlockedIncrement FormatMessageW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalFree LocalAlloc GlobalFlags WritePrivateProfileStringW lstrlenW GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA MulDiv GetModuleHandleA InterlockedDecrement GlobalUnlock GetCurrentProcessId GetLastError SetLastError GlobalAddAtomW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW WideCharToMultiByte CompareStringA MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessW GetCommandLineW FindClose FindNextFileW CopyFileW FindFirstFileW GetSystemDefaultLangID GetVersionExW QueryPerformanceCounter GetModuleFileNameW

user32

RegisterClipboardFormatW PostThreadMessageW GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW CharNextW ReleaseCapture LoadCursorW SetCapture ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW UnhookWindowsHookEx GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled DestroyMenu UnregisterClassW MessageBoxW CharUpperW GetSysColorBrush MessageBeep SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage PostMessageW EnableWindow GetClientRect GetSystemMetrics SendMessageW IsIconic LoadIconW GetMenuItemID UnregisterClassA

gdi32

GetStockObject SelectObject GetDeviceCaps GetBkColor GetTextColor DeleteDC GetRgnBox GetMapMode Escape ExtTextOutW TextOutW RectVisible PtVisible ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx CreateRectRgnIndirect CreateBitmap GetWindowExtEx GetViewportExtEx GetObjectW DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC SetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegQueryValueW RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen SysFreeString