2c00487853a61f6767cd12af4af9df2a[.]bin

General

Target
2c00487853a61f6767cd12af4af9df2a.bin
Size 254KB
Sample240601-bwcszadf42
SHA256 b1a26ff5a529acbae279434cc682eb773da68f007fa0e47a42d6d74549ebd453
MD5 c82ea9bae8c38ab9cec25e5c69a321ae
SHA1 0c2422a8a1183661ae8fadde943ecf10f5eb9e37
SHA512 b63138c77aa6cfd5c7d2479454f0e3b8b6dbe870e43971b7fc9ef0deffc5035cde6f13326feb985aecf8700064dd06645a1be57dec0bab349ddf6c3651f10aa1
SSDEEP 6144:TFWor6AvfhlGyqeVB2LdsT4zpDGrW1s8LoT+:goWMBqeyd1NnsooT+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c.exe

File Explorer

2c00487853a61f6767cd12af4af9df2a.bin

.zip 254KB
3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c.exe

.exe 393KB

2c00487853a61f6767cd12af4af9df2a.bin

SHA256 b1a26ff5a529acbae279434cc682eb773da68f007fa0e47a42d6d74549ebd453
MD5 c82ea9bae8c38ab9cec25e5c69a321ae
SHA1 0c2422a8a1183661ae8fadde943ecf10f5eb9e37
SHA512 b63138c77aa6cfd5c7d2479454f0e3b8b6dbe870e43971b7fc9ef0deffc5035cde6f13326feb985aecf8700064dd06645a1be57dec0bab349ddf6c3651f10aa1
SSDEEP 6144:TFWor6AvfhlGyqeVB2LdsT4zpDGrW1s8LoT+:goWMBqeyd1NnsooT+
MD5 SHA1 SHA512 SSDEEP

Password

infected

3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c.exe

IMPHASH 15aa08528829671bc5d93157e3a8d728
SHA256 3e41d664051e58f25c2b38755a41ed162df2da9e619675bd1ffd90ffa68d960c
MD5 2c00487853a61f6767cd12af4af9df2a
SHA1 c720586be075d6f11df8a0ccf546b63faeaadc85
SHA512 5f5377e0a2633147b6af8936b640c542ac54cf36f13536a68d31d01c1019f4a70fce12137d01c6b59b8c44f75c6158d02f178465d6041f66642485b1b90911f5
SSDEEP 6144:O4WBTB9d+a4q8l54K8H7j+8sbQVACLRK6YuXndeHX:O4eTB9Wq8l5k2tQvRKb0n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

15552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LocalAlloc GetLastError SetLastError ReadProcessMemory GetTickCount _lopen OpenEventA LoadLibraryW LoadLibraryExA GetModuleFileNameW GetModuleHandleA GetSystemDirectoryW CreateDirectoryW SetFileAttributesW GetVolumeInformationW IsBadStringPtrA BuildCommDCBA SetComputerNameA SetInformationJobObject FindNextVolumeA FindNextVolumeMountPointW GetOEMCP GetCalendarInfoA GetNumberFormatA GetStringTypeA SetConsoleCursorInfo SetConsoleWindowInfo AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetACP GetCPInfo HeapReAlloc OutputDebugStringW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW

user32

GetSysColorBrush SetMenu DdeFreeStringHandle

Sharing