55cbf73af4d051e51c51f0cd51ad4685[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

55cbf73af4d051e51c51f0cd51ad4685.bin
Size

101KB
MD5

7ac55155be8f4ab149627f0bed263998
SHA1

d88eddec8f48ecc900058a1aac8ac7c0fa58aa16
SHA256

447234bf3eee20b4ab814abff023ca9e00d2bdaa920a998cf023cc52dd31f6da
SHA512

12036bfd5b644d99f7055ce2810181216780e86a99a38f86e09836e5029826e6b62b3c91cb23d8447b20c8e2b51fd9fa19368f3e52d560d9a98e1eba7f09d4b7
SSDEEP

1536:cjgwS9b84c7HZu/rxqYaE6mydKtZCwpxGMXSO1Z8VANSvUgdM9tgES5z6JM:ogp/cNuzcYaETJ/H5CYqAVuhZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3d5261b4d6b3c10a9a9e12fc65df89a794fdb65bb34699a7b794a114e5196135.exe

Files

55cbf73af4d051e51c51f0cd51ad4685.bin
.zip

Password: infected
3d5261b4d6b3c10a9a9e12fc65df89a794fdb65bb34699a7b794a114e5196135.exe
.exe windows:5 windows x86 arch:x86

Password: infected

0b47c746b58dc722dcec07246158fda2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
VirtualAlloc
GetFileSize
CreateFileA
Sleep
GetTickCount64
VirtualFree
SetEndOfFile
CreateFileW
SetStdHandle
WriteConsoleW
LoadLibraryW
IsValidLocale
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
GetProcessHeap

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

0b47c746b58dc722dcec07246158fda2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 114KB - Virtual size: 113KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 114KB - Virtual size: 113KB

.reloc
Size: 8KB - Virtual size: 7KB