06ea49951dde098f018a213ee7a8a38d.bin
- SHA256 d31af3da89cca5e2b2c0fc5e86edc9b27782f4b10678ad94f946c34a94acaa18
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9b0892598b3725a436c414e9dddb9ef43b85d9bb08c2007dd8735a14374d132e.dll
Resource
win7-20240704-en
windows7-x64
10 signatures
150 seconds
General
- Target 06ea49951dde098f018a213ee7a8a38d.bin
- Size 6.0MB
- Sample240902-bcv57sxapn
- SHA256 d31af3da89cca5e2b2c0fc5e86edc9b27782f4b10678ad94f946c34a94acaa18
- MD5 7c1e78a578323b64de70423e41886afa
- SHA1 203dcf3c2c02ff7e82912fc3a23d43845a0bd1dd
- SHA512 1e0ee46090f6e2e82934cd77a6db5030ace5306741b8bdbfd45122920d08809bc2ddcb0a2ec09ac092c2d75928aa1ddeb222a0960572051ecd1aa3d2da43bc23
- SSDEEP 98304:jUgwgtRlr6OPGj/1Dq/rD7lsO4X7BNViUXiXbm6tGWJCplbcC7QOGmRt20Q6rZU4:4gwyP69iblsFtXWbVMc5GR19
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9b0892598b3725a436c414e9dddb9ef43b85d9bb08c2007dd8735a14374d132e.dll
File Explorer
-
06ea49951dde098f018a213ee7a8a38d.bin.zip 6.0MB
-
9b0892598b3725a436c414e9dddb9ef43b85d9bb08c2007dd8735a14374d132e.dll.dll 6.4MB
9b0892598b3725a436c414e9dddb9ef43b85d9bb08c2007dd8735a14374d132e.dll
- IMPHASH 7cd74f7474e981fda0ae7dfc861e61cb
- SHA256 9b0892598b3725a436c414e9dddb9ef43b85d9bb08c2007dd8735a14374d132e
- MD5 06ea49951dde098f018a213ee7a8a38d
- SHA1 e8e31ed1db5f018664abf85154112ee1f478e9e2
- SHA512 85f2e17fb372f82c819e0abc631e4d6fefc12cb31995abb5410d7c99a288b257b01e37657f0b60bf9e02e32c4653f2c252e91e042b9b6069679231274f5543f5
- SSDEEP 98304:Fw5fRmhQ1orSk3GCK4J7vADNR6oXc0/8+x0bRtI4PPgbYhiLC9kEN6+/mu:ifiQ15M2aIDS0i+SRi4samC9bN9O
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
425351
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
GetModuleFileNameW
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
SetFilePointerEx
GetSystemDefaultUILanguage
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
SuspendThread
GetVersion
IsDebuggerPresent
GetThreadPriority
DeviceIoControl
VirtualAlloc
HeapDestroy
FormatMessageW
GetLogicalDrives
CreateDirectoryW
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
GetProcessHeap
SetErrorMode
SystemTimeToFileTime
EnumResourceNamesW
GetFullPathNameW
EnumCalendarInfoW
lstrcpyW
GetExitCodeThread
SizeofResource
HeapSize
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
HeapFree
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
user32
ShowOwnedPopups
DestroyWindow
SetCursor
GetDlgItemInt
SetTimer
SetKeyboardState
SetCapture
RemovePropA
GetClientRect
BeginPaint
WaitMessage
GetCapture
ShowCursor
OffsetRect
LoadMenuW
GetWindowLongW
UnregisterClassA
GetWindowLongA
GetWindowTextW
CreateMenu
SendDlgItemMessageW
GetSysColor
EnumChildWindows
AppendMenuA
GetMenuItemCount
GetKeyboardType
CheckRadioButton
GetSystemMetrics
EnableWindow
GetDlgCtrlID
GetDlgItemTextA
GetCaretBlinkTime
SetMenuItemInfoW
GetMonitorInfoW
RegisterClassA
EndPaint
RegisterWindowMessageW
DrawTextExW
GetMenu
GetSystemMenu
CharUpperBuffW
CreateDialogParamA
GetWindowTextLengthA
GetDoubleClickTime
GetDC
GetDesktopWindow
GetClassNameW
gdi32
GetTextExtentPoint32W
PatBlt
GetCharacterPlacementW
CreateFontIndirectA
SelectObject
CreateCompatibleDC
SaveDC
GetCurrentPositionEx
GetTextExtentExPointA
GetCharWidth32A
SetTextAlign
GetPixel
ExtTextOutA
CreateSolidBrush
SetBkColor
CreateBitmap
GetSystemPaletteEntries
BitBlt
CreateFontIndirectW
GdiFlush
SelectClipRgn
GetStockObject
ExtCreatePen
advapi32
GetLengthSid
RegLoadKeyW
AllocateAndInitializeSid
QueryServiceStatus
RegQueryInfoKeyW
CopySid
OpenSCManagerW
shell32
ExtractIconExW
SHGetFileInfoW
oleaut32
VariantChangeType
SysAllocStringLen
VariantInit
Name
.text
Size
521KB
Virtual Size
520KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5.9MB
Virtual Size
17.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=223, productName=VS2013 build 21005, version=21005,
count=68, id=225, productName=VS2013 build 21005, version=21005,
count=193, id=224, productName=VS2013 build 21005, version=21005,
count=13, id=203, version=65501,
count=182, id=1, productName=Unmarked objects,
count=6, id=229, version=40629,
count=26, id=225, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,