dbdc2f5b2f7b338a4673cb4b5b207d72[.]bin

General

Target
dbdc2f5b2f7b338a4673cb4b5b207d72.bin
Size 162KB
Sample240726-dzb2ysxakd
SHA256 cdc5752aa11d41d823c524fdc0fdb017402e2bdf1cbfd8794f723c71556f33cd
MD5 983582de94ea083f43948676bfe9b783
SHA1 bc1d29e1899f73d8ed2772a970e75f0d6c721815
SHA512 19556eb454f6c7a3f64f062b434f6f9b994c4ef49cb829359b672e14a006c4864c373306b2e7a3ae566a1fde5b5dca46be10ebc8a7e7a63536b7b889feef64eb
SSDEEP 3072:euTk/VcIW98ejl8iHeiNZEiQuLrEBMcYg52PZQrAlpS8zAbL1RshVR3tt9W:fINgKi+iNIIrEBTISIU8EbLEhbP4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d74ebe06d17fc8e347dda04ca17006fa2f24deb7df06617feb13bffdc9bee476.exe

File Explorer

dbdc2f5b2f7b338a4673cb4b5b207d72.bin

.zip 162KB
d74ebe06d17fc8e347dda04ca17006fa2f24deb7df06617feb13bffdc9bee476.exe

.exe 271KB

dbdc2f5b2f7b338a4673cb4b5b207d72.bin

SHA256 cdc5752aa11d41d823c524fdc0fdb017402e2bdf1cbfd8794f723c71556f33cd
MD5 983582de94ea083f43948676bfe9b783
SHA1 bc1d29e1899f73d8ed2772a970e75f0d6c721815
SHA512 19556eb454f6c7a3f64f062b434f6f9b994c4ef49cb829359b672e14a006c4864c373306b2e7a3ae566a1fde5b5dca46be10ebc8a7e7a63536b7b889feef64eb
SSDEEP 3072:euTk/VcIW98ejl8iHeiNZEiQuLrEBMcYg52PZQrAlpS8zAbL1RshVR3tt9W:fINgKi+iNIIrEBTISIU8EbLEhbP4
MD5 SHA1 SHA512 SSDEEP

Password

infected

d74ebe06d17fc8e347dda04ca17006fa2f24deb7df06617feb13bffdc9bee476.exe

IMPHASH e22fde80595c4bea0880fd6845018d6a
SHA256 d74ebe06d17fc8e347dda04ca17006fa2f24deb7df06617feb13bffdc9bee476
MD5 dbdc2f5b2f7b338a4673cb4b5b207d72
SHA1 9d939273f145ee1d05d226d44e1256ea45625e4f
SHA512 235d2c120eda51a1f0652d7b44b12abe63e82f0d1a1ee4436eee9660fd8ec7f163167351743c46a1b7f3cafc92d5214c1c2a1baea8e41f22517896de87434489
SSDEEP 3072:C072IS3LradTKvOypCmyGJOB9P4+5F0Ogp/fqzVkB9a5nLum2/ZWbjM+dlNR6tAm:kaRY/0jWt+MOgpfqCBKL4B6p+tA8JoX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

5

Entry point

663552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fofenicukib6-yovini1.pdb

kernel32

LoadLibraryA CreateMutexW SetLocaleInfoW FindNextVolumeW GetNamedPipeHandleStateA LocalFileTimeToFileTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterA CreateTimerQueueTimer TerminateProcess SetEvent FindNextFileW GetCompressedFileSizeA CopyFileExW BuildCommDCBW VerifyVersionInfoA FreeResource SetLastError GetVersionExA ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameW GetCommConfig WritePrivateProfileStructW LocalFree CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA LoadResource AddAtomW InitAtomTable GetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GlobalAlloc VerifyVersionInfoW InterlockedExchange FindFirstChangeNotificationW SearchPathW FormatMessageW SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID TerminateThread GlobalUnfix SetConsoleWindowInfo InterlockedDecrement GetStartupInfoA GetSystemWow64DirectoryW CopyFileA GetPrivateProfileIntA SetCalendarInfoW DebugBreak SetConsoleCursorInfo FreeLibraryAndExitThread GetModuleFileNameA SetConsoleScreenBufferSize WaitForDebugEvent InterlockedExchangeAdd GetOEMCP GetPrivateProfileStringW CreateActCtxA GetPrivateProfileIntW ReadConsoleInputW OutputDebugStringW SetThreadAffinityMask FlushConsoleInputBuffer lstrlenA WriteConsoleW OpenMutexW GetThreadContext DeleteCriticalSection QueryDepthSList ConvertFiberToThread SetProcessPriorityBoost LockFile FreeEnvironmentStringsA GetConsoleCP CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA CreateMailslotW GetCommState MoveFileWithProgressW GetSystemTimeAdjustment EnumSystemLocalesA GetLastError WriteProfileStringA OpenMutexA OpenWaitableTimerW OpenFileMappingW GetFileSizeEx GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetNumberFormatA BuildCommDCBAndTimeoutsW GetConsoleAliasExesA GetBinaryTypeW GetModuleHandleW Sleep InterlockedIncrement GetProcAddress ExitProcess MoveFileA DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree WriteFile GetStdHandle GetACP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharUpperW

Sharing