08b33932a616b7f09dc503949ab916b0[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

08b33932a616b7f09dc503949ab916b0.bin
Size

218KB
MD5

08b33932a616b7f09dc503949ab916b0
SHA1

5d27a06c7054a9a3f7006dcd8e564999e6ac4049
SHA256

ccf8780f6a6d2187185de6362ab76bb249292c191a0b41f411115829c7f7aacc
SHA512

36d8cebab0611f5b9543b0118f25d8cc43e7de4a55d81080091ba6325a24269e74883074e01ab5bf3c9fb184c7c1e2460ad0b47e629895e90f19e547df3003de
SSDEEP

6144:PEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwIC:PEGDdQNHEwWlMxYG/wI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b33932a616b7f09dc503949ab916b0.bin

Files

08b33932a616b7f09dc503949ab916b0.bin
.exe windows:4 windows x86 arch:x86

2e5df9fb7e893bd2efa286b6326edce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
EnumCalendarInfoA
DisconnectNamedPipe
MoveFileA
lstrcpyn
GetCommandLineA
GetSystemDirectoryW
GetEnvironmentVariableA
IsBadStringPtrA
FindAtomW
ReadDirectoryChangesW
GetFullPathNameW
GetFileAttributesA
ExitThread
LoadLibraryA
lstrlenA
lstrlen
FindResourceA
FindResourceW
GetTempPathW
GetFullPathNameA
OpenMutexW
SearchPathW
GetProcAddress
EnumTimeFormatsW
GetLocaleInfoW
EnumTimeFormatsA
GetCPInfo
OpenMutexA
GetThreadPriority
LoadResource
CreateFileMappingA
GetNamedPipeInfo
lstrcpynW
CompareStringW
OpenFile
IsBadCodePtr
GetDiskFreeSpaceA
GetTimeFormatW
FindAtomA
GlobalGetAtomNameW
MultiByteToWideChar
CreateMailslotW

user32

LoadMenuIndirectW
GetDC
SetCursorPos
OpenClipboard
CreateAcceleratorTableA
OffsetRect
IsDlgButtonChecked
LoadMenuIndirectA
GetMessageW
WinHelpA
UpdateWindow
IsMenu
GetKeyState
UnregisterClassA
DestroyIcon
ShowWindow
SetFocus
TrackPopupMenuEx

gdi32

GetLogColorSpaceW
EnumFontFamiliesW
CreateICW
OffsetClipRgn
SetRectRgn
SetTextColor
PlayEnhMetaFile
CreateFontIndirectExW
GetOutlineTextMetricsW
GetBrushOrgEx
SetEnhMetaFileBits
StartDocW
GetObjectA

advapi32

RegQueryInfoKeyW
RegOpenKeyExA
RegQueryValueW
RegReplaceKeyW
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegOpenKeyExW
RegReplaceKeyA
RegRestoreKeyW

shell32

SHGetDataFromIDListA
SHGetFileInfoA

shlwapi

StrStrW
SHOpenRegStream2A
StrToIntA
PathParseIconLocationA
PathSkipRootW
StrToIntExA
PathCreateFromUrlA
StrCmpNIW
StrChrNIW
UrlIsOpaqueA

ole32

CoGetCurrentProcess
CLSIDFromString

winmm

midiOutSetVolume
mxd32Message
mmioClose
mciSendStringW
mmioSendMessage
mixerGetLineControlsW
mmTaskBlock

Sections

.ma
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.obptK
Size: 5KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Wv
Size: 2KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UeARA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rddrej
Size: 3KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.roXfGq
Size: 3KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BOJdrg
Size: 3KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IU
Size: 3KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.y
Size: 512B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 109KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kzG
Size: 1KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cMrd
Size: 512B - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e5df9fb7e893bd2efa286b6326edce6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ole32

winmm

Sections

.ma Size: 6KB - Virtual size: 6KB

.obptK Size: 5KB - Virtual size: 197KB

.Wv Size: 2KB - Virtual size: 341KB

.UeARA Size: 9KB - Virtual size: 9KB

.rddrej Size: 3KB - Virtual size: 396KB

.roXfGq Size: 3KB - Virtual size: 458KB

.BOJdrg Size: 3KB - Virtual size: 37KB

.IU Size: 3KB - Virtual size: 473KB

.y Size: 512B - Virtual size: 148KB

.data Size: 109KB - Virtual size: 332KB

.kzG Size: 1KB - Virtual size: 205KB

.cMrd Size: 512B - Virtual size: 162KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 1024B - Virtual size: 634B

.ma
Size: 6KB - Virtual size: 6KB

.obptK
Size: 5KB - Virtual size: 197KB

.Wv
Size: 2KB - Virtual size: 341KB

.UeARA
Size: 9KB - Virtual size: 9KB

.rddrej
Size: 3KB - Virtual size: 396KB

.roXfGq
Size: 3KB - Virtual size: 458KB

.BOJdrg
Size: 3KB - Virtual size: 37KB

.IU
Size: 3KB - Virtual size: 473KB

.y
Size: 512B - Virtual size: 148KB

.data
Size: 109KB - Virtual size: 332KB

.kzG
Size: 1KB - Virtual size: 205KB

.cMrd
Size: 512B - Virtual size: 162KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 1024B - Virtual size: 634B