efc76b9581da08661c9c91c2a6e7d289.bin
- SHA256 57340333fcf17e052d3b1b914593f080453234a640d03f327565bae605dcc7be
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
85356bb669ec17503e48ca457e99347f5386ba644fba9d638d4188a7b4970153.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
General
- Target efc76b9581da08661c9c91c2a6e7d289.bin
- Size 415KB
- Sample240706-d4enmsxcnf
- SHA256 57340333fcf17e052d3b1b914593f080453234a640d03f327565bae605dcc7be
- MD5 5d431d9ad35031eb02165b6725a6f718
- SHA1 5228b9e4d3447e16bbf9d44b987f50c3dc8e7841
- SHA512 74ab2ba18a690cdbdf02a133e0478eee055b6c1e9d9235c701019ec777ce207b90837a05003dfba42ec6589052f762cfa6dff75f24af7db56d536d1855b81934
- SSDEEP 12288:5Scti6lyQtQYHu1f6/DmQDVR8zcFpBsoP4f0ue:Y7SyQtQYHw6bmcvP4sT
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/85356bb669ec17503e48ca457e99347f5386ba644fba9d638d4188a7b4970153.exe
File Explorer
-
efc76b9581da08661c9c91c2a6e7d289.bin.zip 415KB
-
85356bb669ec17503e48ca457e99347f5386ba644fba9d638d4188a7b4970153.exe.exe 518KB
85356bb669ec17503e48ca457e99347f5386ba644fba9d638d4188a7b4970153.exe
- IMPHASH 811cfc8e0687b9bcab4d19d1ac4a7df0
- SHA256 85356bb669ec17503e48ca457e99347f5386ba644fba9d638d4188a7b4970153
- MD5 efc76b9581da08661c9c91c2a6e7d289
- SHA1 ef7674fe136d80308a44d99ac72b8be550604110
- SHA512 b2d3432b68b227a5ad64faf6cc789f32ab2234a070c25393849c3d170616a125c1c3c82e18a7952b3ddd3a0024ff845c67aa67ce9b011b9cd9b74e093fc4e5d1
- SSDEEP 12288:MnUGt+HbHe5BjPORtvLP9qpbY7/2E1yItd2ybSLxWP1yh:Mnncbs1PODZqpBCSiS8Pg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
44985
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
OffsetRect
GetUpdateRgn
kernel32
CreateFileW
HeapSize
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
VirtualAlloc
WaitForSingleObject
CreateThread
GetThreadId
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
GetCurrentThreadId
CloseHandle
WaitForSingleObjectEx
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
ReleaseSRWLockExclusive
WakeAllConditionVariable
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetCPInfo
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
FreeEnvironmentStringsW
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
WriteConsoleW
AwakeSound
Name
.text
Size
158KB
Virtual Size
158KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.BSS
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
304KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=29395,
count=171, id=261, version=29395,
count=21, id=260, version=29395,
count=18, id=260, version=33218,
count=21, id=259, version=33218,
count=7, id=257, version=29395,
count=129, id=1, productName=Unmarked objects,
count=86, id=261, version=33218,
count=1, id=265, version=33523,
count=1, id=256, version=33523,
count=1, id=255, version=33523,
count=1, id=258, version=33523,