fba91210d1a5a6aefbede8117661d2dc[.]bin

General

Target
fba91210d1a5a6aefbede8117661d2dc.bin
Size 440KB
Sample240611-enxpysvaml
SHA256 6ece921100b5d353b4d36e4195580457b2a675b42b0a7c7eae555bc13bd9a399
MD5 3ed801aedd56d79bfc0bc9adff228d15
SHA1 ca30fa7a803638b52b3403996db3fcc54fc4ad8b
SHA512 2aa2b7a59a83d4588826afdef50f54cafee811f3562eb281d58b9c0ef12f99e603a7a3b15d8fa04c2e017426d2f8483f6314ace6c1d3a1c2e9d520e0037e0bf5
SSDEEP 12288:cq9gR8spl3TzJnaKl6eI8Z1guHsEQWs6ZjSie:c7Rpl3PzE41gap46ZjU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e4bbe580378b71b55d15e97496735de3b514169f01da4f9795d4e51c7ff931a9.exe

File Explorer

fba91210d1a5a6aefbede8117661d2dc.bin

.zip 440KB
e4bbe580378b71b55d15e97496735de3b514169f01da4f9795d4e51c7ff931a9.exe

.exe 577KB

fba91210d1a5a6aefbede8117661d2dc.bin

SHA256 6ece921100b5d353b4d36e4195580457b2a675b42b0a7c7eae555bc13bd9a399
MD5 3ed801aedd56d79bfc0bc9adff228d15
SHA1 ca30fa7a803638b52b3403996db3fcc54fc4ad8b
SHA512 2aa2b7a59a83d4588826afdef50f54cafee811f3562eb281d58b9c0ef12f99e603a7a3b15d8fa04c2e017426d2f8483f6314ace6c1d3a1c2e9d520e0037e0bf5
SSDEEP 12288:cq9gR8spl3TzJnaKl6eI8Z1guHsEQWs6ZjSie:c7Rpl3PzE41gap46ZjU
MD5 SHA1 SHA512 SSDEEP

Password

infected

e4bbe580378b71b55d15e97496735de3b514169f01da4f9795d4e51c7ff931a9.exe

IMPHASH 7727e7f42a51bd4856eabd9ef6eb43a0
SHA256 e4bbe580378b71b55d15e97496735de3b514169f01da4f9795d4e51c7ff931a9
MD5 fba91210d1a5a6aefbede8117661d2dc
SHA1 86155bfb5bc3e4bde9556c2919076510a1523e78
SHA512 3baba4d8073c4c1d66c8bb51b75a747e2aebac65593f0ad19d6fb5679de01a4b7ecf3947915159e30e5e226db5b9302c463b768f3268a70ce9c1394e544c8642
SSDEEP 12288:+zmhRmHvXQnu6OQqzhm7bsbYP6+fpyfCfsjGHyUMMAiu:xhRmoQa7bb64p0CKUMTi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

5

Entry point

9164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetTimeFormatA GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW FindNextVolumeW GetConsoleAliasW FileTimeToSystemTime CompareStringW SetConsoleTitleA CreateJobObjectA GetNamedPipeHandleStateW EnumCalendarInfoW SetLastError GetProcAddress SetVolumeLabelW BuildCommDCBW LoadLibraryA UnhandledExceptionFilter LocalAlloc GetModuleFileNameA SetConsoleCursorInfo lstrcatW GetProcessAffinityMask PurgeComm EnumDateFormatsW DeleteCriticalSection DeleteAtom OpenFileMappingA EnumCalendarInfoExA SetThreadLocale InterlockedIncrement GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

advapi32

SetThreadToken

Sharing