c89ddb4a4a1c1ed7928b9a1dd8d8fcb6[.]bin

General

Target
c89ddb4a4a1c1ed7928b9a1dd8d8fcb6.bin
Size 24.2MB
Sample240611-d876ratejq
SHA256 982328486c7adcfa85ccd60028bb5c44fbf612e0d1890ee0a41130f1f63cab3c
MD5 e1ce916e60f19ca22d87d261102b2f6f
SHA1 b7a1adbd169b29fb64f82123a3880783c3866ecd
SHA512 f3b16798f93fc22aa0ec8e2fa1575cd5cdadd6d06522312f715fa0d3cc5dab99f0d91f01dab3f97920f9aa7464addf93f3c2cc1d432fd7dd1eaa7496015afe79
SSDEEP 393216:cGud9MAy7HvWrXShsZBdKJxkBVXnkZ+bFiXAXIiPgMn8sY23Hr0lOzkFw7nk:c4DPWrYxsV3kZMiXA3P/niGr08kFYk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9af7915a980b3ba7a89b8e00b08cfe257ba767910d7c486ff7af085dc85a23be.exe

File Explorer

c89ddb4a4a1c1ed7928b9a1dd8d8fcb6.bin

.zip 24.2MB
9af7915a980b3ba7a89b8e00b08cfe257ba767910d7c486ff7af085dc85a23be.exe

.exe 24.3MB

c89ddb4a4a1c1ed7928b9a1dd8d8fcb6.bin

SHA256 982328486c7adcfa85ccd60028bb5c44fbf612e0d1890ee0a41130f1f63cab3c
MD5 e1ce916e60f19ca22d87d261102b2f6f
SHA1 b7a1adbd169b29fb64f82123a3880783c3866ecd
SHA512 f3b16798f93fc22aa0ec8e2fa1575cd5cdadd6d06522312f715fa0d3cc5dab99f0d91f01dab3f97920f9aa7464addf93f3c2cc1d432fd7dd1eaa7496015afe79
SSDEEP 393216:cGud9MAy7HvWrXShsZBdKJxkBVXnkZ+bFiXAXIiPgMn8sY23Hr0lOzkFw7nk:c4DPWrYxsV3kZMiXA3P/niGr08kFYk
MD5 SHA1 SHA512 SSDEEP

Password

infected

9af7915a980b3ba7a89b8e00b08cfe257ba767910d7c486ff7af085dc85a23be.exe

IMPHASH e6f4169f2a5c3a8f93171d9f593bd22a
SHA256 9af7915a980b3ba7a89b8e00b08cfe257ba767910d7c486ff7af085dc85a23be
MD5 c89ddb4a4a1c1ed7928b9a1dd8d8fcb6
SHA1 0a158c1b36c932a5ca8e1e024b018455190ce0d5
SHA512 9062eedf628aac79ff5897cb8301c4f3979b8265aea1712d8b515575bd60162f4174aa9f8dcc9c9863db42a70541f31044b30711b2e3e0b6edd33e735a1a6ca4
SSDEEP 393216:jrEF4Rj+dK9lZvXOpHt2LkQN54hDPwEsnjC+eAYZtIxQRi8dYJe:cF4od8ZGHMkEKhjsjBeAuie
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

6

Entry point

43868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\Setup.pdb

kernel32

LoadResource FindResourceW lstrlenW GetProcAddress GetModuleHandleW DeleteCriticalSection GetTempPathW GetLastError GetTempFileNameW MoveFileW WaitForSingleObject GetExitCodeProcess CloseHandle DeleteFileW GetModuleFileNameW GetCurrentProcess LoadLibraryW FreeLibrary InitializeCriticalSectionEx GetFileAttributesW CreateFileW SetFilePointer ReadFile VerSetConditionMask GetCurrentDirectoryW MultiByteToWideChar LocalFileTimeToFileTime WideCharToMultiByte CreateDirectoryW WriteFile SetFileTime FreeResource SizeofResource LockResource CreateProcessW GetSystemDirectoryW SetDefaultDllDirectories GetCurrentThreadId DecodePointer RaiseException LeaveCriticalSection EnterCriticalSection lstrcmpiW LoadLibraryExW GetConsoleMode GetConsoleCP SystemTimeToFileTime VerifyVersionInfoW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle HeapFree HeapAlloc GetFileType CompareStringW LCMapStringW HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW GetFileSizeEx SetFilePointerEx FlushFileBuffers WriteConsoleW

shlwapi

PathIsUNCW

comctl32

InitCommonControlsEx

Sharing