fcdd663b039457213fb45b69d7235aa1[.]bin

General

Target

fcdd663b039457213fb45b69d7235aa1.bin
Size

37KB
MD5

035fad4f91d7e1579d240f8e9d9d9cbf
SHA1

86ac4590c7f75974363ea903e844888a8c12d378
SHA256

1d555911c4b456caa2145944187f32cda09596be3a2afe0b48b7aa8dde2efb81
SHA512

777c8aa7b1532240c3374a66bbef0d37eaf706a4405e190b2a1700893c709dc5e42a7af727e6ac58197b0dbf581e431cbacd24be03335191e4c6a696e7cc1fab
SSDEEP

768:Qz9rCiFVVOgh/q0Dy0+F3t/xkYj7MQAKESOjdlYWUFt7l3Hhn8t:2FCib/1Dy0c3t/GYfLp5Dl3Bn8t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/85bfba5b21665c8e32e1981f8576b8b48de0fe90770a9ef7617e876b652a195d.exe

Files

fcdd663b039457213fb45b69d7235aa1.bin
.zip

Password: infected
85bfba5b21665c8e32e1981f8576b8b48de0fe90770a9ef7617e876b652a195d.exe
.exe windows:4 windows x64 arch:x64

Password: infected

709a6c78d6493ee4fa6f152ac9f2ae74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapAlloc
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
HeapFree
GetVersionExA
GetProcessHeap
RtlVirtualUnwind
RtlLookupFunctionEntry
GetLastError
RaiseException
RtlPcToFileHeader
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

EnumThreadWindows

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

709a6c78d6493ee4fa6f152ac9f2ae74

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 8KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 176B

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 8KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 176B