2aa41ea0abe9338320dcd9d1ce40c0d9[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
2aa41ea0abe9338320dcd9d1ce40c0d9.bin
Size 1.8MB
Sample240625-b7t7dstgpd
SHA256 776e50f974dced594a0833c2436513bfc5ab87c1f03b69bf81aa2b10f10cdeab
MD5 27414aa63d8683068c9381ccc3673c45
SHA1 bfd2b93e863b729cc0223b0f3a8d77a0f3038e21
SHA512 bdd8b1b0eac52b23c9c983e436980ac813b5d83cfac810fa4149cbf69fdd7cff8e51a92c5058252eb4393f464c8f37f0aac68a572c56002e300e62461aa4c1af
SSDEEP 49152:hPg22ujs1QY8V7HlmTsyYU3LreQzDZB8MQjKu1q2+W:xx28+i5lrGPBnZZKK/jW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/56ecdcec8dd5812ec6b64a37296ae61cf7c5a73824fb89329a7752eaeb0bd4f0.exe

File Explorer

2aa41ea0abe9338320dcd9d1ce40c0d9.bin

.zip 1.8MB
56ecdcec8dd5812ec6b64a37296ae61cf7c5a73824fb89329a7752eaeb0bd4f0.exe

.exe 1.8MB

2aa41ea0abe9338320dcd9d1ce40c0d9.bin

SHA256 776e50f974dced594a0833c2436513bfc5ab87c1f03b69bf81aa2b10f10cdeab
MD5 27414aa63d8683068c9381ccc3673c45
SHA1 bfd2b93e863b729cc0223b0f3a8d77a0f3038e21
SHA512 bdd8b1b0eac52b23c9c983e436980ac813b5d83cfac810fa4149cbf69fdd7cff8e51a92c5058252eb4393f464c8f37f0aac68a572c56002e300e62461aa4c1af
SSDEEP 49152:hPg22ujs1QY8V7HlmTsyYU3LreQzDZB8MQjKu1q2+W:xx28+i5lrGPBnZZKK/jW
MD5 SHA1 SHA512 SSDEEP

Password

infected

56ecdcec8dd5812ec6b64a37296ae61cf7c5a73824fb89329a7752eaeb0bd4f0.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 56ecdcec8dd5812ec6b64a37296ae61cf7c5a73824fb89329a7752eaeb0bd4f0
MD5 2aa41ea0abe9338320dcd9d1ce40c0d9
SHA1 cba5b444e22e93f2b1c338aa01c0632a48f6489d
SHA512 4ef0a2947512eff810ce5b3e22e19e350313ccf6433b4e866ec8a3823608f0d7280ad6382a24f21c6a1f324dc706476da10f400e818c68a2d5816f89eb5be4a0
SSDEEP 49152:m3pFPYD7oqYz+4eyGZS2tUJ1xCZ6X4pVs:+vqWsZbU/xCZe4pV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

5033984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

183KB

Virtual Size

416KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

sfqkszbn

Size

1.6MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

kbbiglfh

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2aa41ea0abe9338320dcd9d1ce40c0d9.bin

56ecdcec8dd5812ec6b64a37296ae61cf7c5a73824fb89329a7752eaeb0bd4f0.exe

kernel32

generic