8f861167ae40df299c47c3f1d68de2e2[.]bin

General

Target
8f861167ae40df299c47c3f1d68de2e2.bin
Size 852KB
Sample240604-dgmezabe77
SHA256 2214cb347df630a4ec5691c93aebee08ac300a0e37a824ba5d9664b5d7f8f7d1
MD5 8f861167ae40df299c47c3f1d68de2e2
SHA1 91ae66ff4122ac131c057bea2efffebc3797d5bd
SHA512 817afeba3778132dea1c3025e96604b736d9e8cb6e3f5f21a4a256e9d0d36c1fd39add8b644d571c04676f73be79952e7588646f27b803945182663343294e41
SSDEEP 24576:wJVL0NlEy2B6RoozL4TRyWNA12b66oSLqSDHYcW:wJl0NlWsdzSyWNI+dLqSvW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f861167ae40df299c47c3f1d68de2e2.bin

File Explorer

8f861167ae40df299c47c3f1d68de2e2.bin

.exe 852KB

8f861167ae40df299c47c3f1d68de2e2.bin

IMPHASH bac283cebf960a307e79da8b8b0e5e83
SHA256 2214cb347df630a4ec5691c93aebee08ac300a0e37a824ba5d9664b5d7f8f7d1
MD5 8f861167ae40df299c47c3f1d68de2e2
SHA1 91ae66ff4122ac131c057bea2efffebc3797d5bd
SHA512 817afeba3778132dea1c3025e96604b736d9e8cb6e3f5f21a4a256e9d0d36c1fd39add8b644d571c04676f73be79952e7588646f27b803945182663343294e41
SSDEEP 24576:wJVL0NlEy2B6RoozL4TRyWNA12b66oSLqSDHYcW:wJl0NlWsdzSyWNI+dLqSvW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

99392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect GetProcAddress LoadLibraryA VirtualAlloc GetCurrentThreadId WaitForSingleObject GetTempPathW DeleteCriticalSection FreeLibrary GetCommandLineW GetTickCount SetEvent Sleep CreateEventA GetCurrentProcessId GetCurrentProcess GetFullPathNameW DeleteFileW CopyFileW GetTempPathA GetModuleFileNameW VirtualFree SizeofResource LoadResource GetModuleHandleA CloseHandle FindResourceW GetLastError HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

ConvertSidToStringSidW CryptCreateHash BuildSecurityDescriptorW

comctl32

ImageList_SetImageCount ImageList_Duplicate InitMUILanguage

Sharing