randombinary-main[.]zip

General

Target
randombinary-main.zip
Size 16.1MB
Sample240612-snsynatdkk
SHA256 d6b470145ec81a77a825ca4fa94e2afb9a5b7b7d2f019fa103601273c7dcbb99
MD5 2bfc96f36c08a761accb0923fa49403d
SHA1 c40a556a3177ea321f66675ce3c9782b76242b38
SHA512 ae23997500dab2c9e686074504123bd92db1cbda879167fa7b5375991ce5ce24fafca7436c8d425dc203cfa1e19b983bd591843fa8eddcc8d98330989ea1d016
SSDEEP 393216:zEvPG7n4Ah32rM+gBLCks8mbtzJBn1ul4XFrVe:zEXGfVrltPs8Uz5ulcxe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/randombinary-main/main.exe

File Explorer

randombinary-main.zip

.zip 16.1MB
randombinary-main/main.exe

.exe 16.2MB

randombinary-main.zip

SHA256 d6b470145ec81a77a825ca4fa94e2afb9a5b7b7d2f019fa103601273c7dcbb99
MD5 2bfc96f36c08a761accb0923fa49403d
SHA1 c40a556a3177ea321f66675ce3c9782b76242b38
SHA512 ae23997500dab2c9e686074504123bd92db1cbda879167fa7b5375991ce5ce24fafca7436c8d425dc203cfa1e19b983bd591843fa8eddcc8d98330989ea1d016
SSDEEP 393216:zEvPG7n4Ah32rM+gBLCks8mbtzJBn1ul4XFrVe:zEXGfVrltPs8Uz5ulcxe
MD5 SHA1 SHA512 SSDEEP

randombinary-main/main.exe

IMPHASH b2e44a6d3c3de37e08023deb2b2f60a9
SHA256 5a453a97e7fb2e901f9b63b24040498505bbd26ccb5d00220a345c3fe18287c7
MD5 2431d98497ce8f32cdaef7bb3761ccc8
SHA1 d1c5ae5b2063c6a20deb58f5d5fe1f5c200a2fb8
SHA512 be04cab2496b27f4c16c277c5d6d12f6507d3ca3fd6def3095b38c62dd2684c154ca852f890b3839eea03f9dae8c53c7fb32adf86aac832e68c9e24b9054b6aa
SSDEEP 393216:DGLxs316WxbBNCvKst6WQy+rN5hJL5uwPiltN:DGtsh5MhIzy+3hywPq/
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

50588

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW

kernel32

SetLastError WriteConsoleW CreateDirectoryW SizeofResource SetConsoleCtrlHandler GetCommandLineW GetStdHandle WriteFile TerminateProcess GetModuleFileNameW SetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapReAlloc RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize

Sharing