41827bf403b6a541d2c6dcd9082537df.bin
- SHA256 2ab16e9e48c4f8bc360fe63287ebf536afd7902a82bdd0a03b1597a784f8b4e8
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d1487083e8cfc4b6f7fa177ab95b28e27feda423ea4f5577c5613f1f41773096.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
General
- Target 41827bf403b6a541d2c6dcd9082537df.bin
- Size 128KB
- Sample240709-bq4pha1fjb
- SHA256 2ab16e9e48c4f8bc360fe63287ebf536afd7902a82bdd0a03b1597a784f8b4e8
- MD5 73b25fb82154835ea5e8532f6b83c153
- SHA1 03326dae1da47bfd5dfdcc0cb79400f6817f6d03
- SHA512 db6972141d1a656e5353a580570615c20da67b8cea3765a27e83cbc5150ec81fd1a1af0b8a0b7f3cee66e83465ed9d8cbb6fa50009c262500e44d22a53199325
- SSDEEP 3072:3+w82IbSGrjp9+fpIA0Gn5EZcL/m3jlUPGNWAF2Z:ub21GriJnGcLuTz/2Z
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d1487083e8cfc4b6f7fa177ab95b28e27feda423ea4f5577c5613f1f41773096.exe
File Explorer
-
41827bf403b6a541d2c6dcd9082537df.bin.zip 128KB
-
d1487083e8cfc4b6f7fa177ab95b28e27feda423ea4f5577c5613f1f41773096.exe.dll 155KB
d1487083e8cfc4b6f7fa177ab95b28e27feda423ea4f5577c5613f1f41773096.exe
- IMPHASH c21fd41af2cf2392ca8ea5044cf42f43
- SHA256 d1487083e8cfc4b6f7fa177ab95b28e27feda423ea4f5577c5613f1f41773096
- MD5 41827bf403b6a541d2c6dcd9082537df
- SHA1 b349d5bfc99e38acbf073d4146c9a35f17b8d153
- SHA512 aab9ab67463eac6fa14a3126e44c4bc3d67ecc959d3e559b052b4e1689c2a88cac39dc2bfa81eaadd00e9077d5f42661a6e43400277c878032f1b1339ea14269
- SSDEEP 3072:/PAs3DfMLgvUHpk5IrFNYZF1+RM+oWdXFGQCzIogbjtJqKEro:/PnELgWkk7YZeKLQ6IXqK9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
4754
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
api-ms-win-crt-private-l1-1-0
memcpy
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-string-l1-1-0
strlen
strncmp
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
DllRegisterServer
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
124KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
620B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
76B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ