1f8f47edda07fd46f9904be046f4b1b0[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

1f8f47edda07fd46f9904be046f4b1b0.bin
Size

10KB
MD5

b9b6ed793e13a59f14a4b6debb06936c
SHA1

e2dca5f7d66db5f6c995719e7f2ab1cbb912a51b
SHA256

bf0960ae9c1ce6c0d766f1ad201fe8d82b0145e43ca3824de27dbff458b29807
SHA512

b1d9d75c640bec1c44d585b5c4125632b98d04abf79ce8f80faf4c35e2ce9499cfa9b98139432a1765f909592c7255c9b9b6f22e95afb05a006a8698fdd09f5a
SSDEEP

192:bU0VZSSQ+yeMgeBF790TrqH1Tt4HYjmST9KFxN11FnR2qM3aNC384Ud:btZS1HRBJ9IqHHUYjmSxKl15oqMn38Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c9701863c3174a552ab6ff2ec367111a8d8853b57e5b093429d1c0f247e20d05.exe

Files

1f8f47edda07fd46f9904be046f4b1b0.bin
.zip

Password: infected
c9701863c3174a552ab6ff2ec367111a8d8853b57e5b093429d1c0f247e20d05.exe
.exe windows:6 windows x64 arch:x64

Password: infected

1ca370719aae893e1747b19b4d30d016

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\SSL-master\x64\Release\SSL.pdb

Imports

kernel32

WriteFile
CreateFileW
CloseHandle
GetEnvironmentVariableA
MultiByteToWideChar
VirtualProtect
VirtualAlloc
GetConsoleWindow
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext

user32

ShowWindow

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

gdiplus

GdipGetImageHeight
GdipBitmapGetPixel
GdipGetImageWidth
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
GdipCreateBitmapFromFileICM
GdiplusStartup

winhttp

WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl

vcruntime140

memcmp
memcpy
memmove
memset
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__C_specific_handler
__CxxFrameHandler3

api-ms-win-crt-heap-l1-1-0

free
malloc
_set_new_mode
_callnewh

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_seh_filter_exe
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_exit
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
exit
_initialize_onexit_table
_register_onexit_function
terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vfprintf
_set_fmode
__acrt_iob_func
__p__commode
puts

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

1ca370719aae893e1747b19b4d30d016

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

gdiplus

winhttp

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 912B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 88B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 912B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 88B