2e2358523bbe722450a7e49eed0534b6.bin
- SHA256 f9c7585bf95c609e91fb5de1caa48ab57b1afa0eac5bc8066b3d9ab2d1e5dc75
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
304555a63b7a431a158fd9e527bdfcb7610f6dfa9231f4184f2e80e85a0dc520.exe
Resource
win7-20240705-en
windows7-x64
10 signatures
150 seconds
General
- Target 2e2358523bbe722450a7e49eed0534b6.bin
- Size 1.1MB
- Sample240718-b3m8aayhrn
- SHA256 f9c7585bf95c609e91fb5de1caa48ab57b1afa0eac5bc8066b3d9ab2d1e5dc75
- MD5 f6351fbe305e08b9793f975c54e9bffa
- SHA1 f413987f307ba65106886e45528d931fbdf64970
- SHA512 7263d79b3fef68c2872df563f13239db51fbf19f73c05f0d5a7942d07f63f858395119a701816ecb4593a656a929310693fab074d8e71d66ffc623761bc49b11
- SSDEEP 24576:9HKwpsB7mDQGbPv9/w67lN2NFyKh4duEMXYmIWDRhzB:9HKwpsBsFbPv9/wNFyTg7XHRj
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/304555a63b7a431a158fd9e527bdfcb7610f6dfa9231f4184f2e80e85a0dc520.exe
File Explorer
-
2e2358523bbe722450a7e49eed0534b6.bin.zip 1.1MB
-
304555a63b7a431a158fd9e527bdfcb7610f6dfa9231f4184f2e80e85a0dc520.exe.exe 3.5MB
304555a63b7a431a158fd9e527bdfcb7610f6dfa9231f4184f2e80e85a0dc520.exe
- IMPHASH e368d523eb295cd5103111cd5dbfd313
- SHA256 304555a63b7a431a158fd9e527bdfcb7610f6dfa9231f4184f2e80e85a0dc520
- MD5 2e2358523bbe722450a7e49eed0534b6
- SHA1 10ac0bbf6ab7e2db1d53a93973bf73573160eeab
- SHA512 13fbfe2ee2ca37d9ace32e0a1c84f0aa726d5dd4145ed9a7385317140486ab8688a8defe71fd31dffe70a7fd17c4c1305b7eeaa5b11a32e55b57b05152a26ce5
- SSDEEP 49152:xSee3hQidqT4kgJmNqf9YWBTg+E5EiCh8:I3hQidXZQNqiWLgR6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
12417
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mfc42
ord4277
ord1182
ord537
ord342
ord1253
ord825
ord1168
ord800
ord4202
ord2818
ord540
ord3571
ord3626
ord2414
ord3663
ord823
msvcrt
printf
isprint
??1type_info@@UAE@XZ
ceil
rand
qsort
strncmp
longjmp
__CxxLongjmpUnwind
_setjmp3
_swab
_CxxThrowException
_close
_setmode
_unlink
ldiv
calloc
strncpy
_strnicmp
floor
realloc
_read
_write
_lseek
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
sprintf
__CxxFrameHandler
_mbscmp
_ftol
fscanf
fgets
getc
fputc
fflush
ftell
fseek
fwrite
fread
fopen
fclose
_purecall
_CIpow
_open
getenv
exit
tmpfile
tmpnam
vsprintf
abort
_pctype
_isctype
__mb_cur_max
fprintf
strrchr
memmove
_iob
atoi
atof
strchr
vfprintf
strtok
strcpy
strlen
memcpy
memset
pow
exp
log
sqrt
fabs
atan2
strstr
_snprintf
gmtime
strtod
_stricmp
putc
sscanf
_errno
_getcwd
fgetc
perror
mktime
kernel32
OutputDebugStringA
GlobalAlloc
GlobalFree
CloseHandle
WaitForSingleObject
ResumeThread
GetTickCount
user32
GetSysColor
ReleaseDC
GetDC
DrawTextA
gdi32
SetEnhMetaFileBits
CreateDIBSection
GetDIBits
RealizePalette
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
CreateFontIndirectA
SelectObject
GetTextExtentPointA
DeleteObject
GetObjectA
GetEnhMetaFileHeader
SetWinMetaFileBits
GetDeviceCaps
DeleteEnhMetaFile
ExtTextOutA
GetEnhMetaFilePaletteEntries
CreatePalette
SelectPalette
PlayEnhMetaFile
GetStockObject
SetTextColor
SetBkMode
StretchDIBits
SetBkColor
SetStretchBltMode
ws2_32
ntohs
htonl
ntohl
htons
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
CreateNewImage
DeleteImage
DrawMyImage
DrawMyText
DrawMyTitle
GetImageBits
GetImageBpp
GetImageHight
GetImageWidth
LoadMyImage
Ratio180SaveMyImage
Ratio270SaveMyImage
Ratio90SaveMyImage
SaveImage
SetImageBackGround
SetRectColor
SetRectImage
SetRectImage2
SetRectImage3
StretchSaveMyImage
Name
.text
Size
816KB
Virtual Size
814KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
144KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
56KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=12, version=7291,
count=29, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=159, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=8, id=19, version=8034,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=7, id=14, version=7299,
count=177, id=1, productName=Unmarked objects,
count=6, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=6, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,