5549e8943fcb60643dc032765675bc486cb7f2f2603d8399ae3946df08b0be84[.]bin[.]sample

Sharing

Copy URL

Twitter E-mail

General

Target

5549e8943fcb60643dc032765675bc486cb7f2f2603d8399ae3946df08b0be84.bin.sample
Size

828KB
MD5

c6fc90e5ff451a319ca1cb857ffd3800
SHA1

21912a61a881ab758f2e176f93ab64ca446951ca
SHA256

5549e8943fcb60643dc032765675bc486cb7f2f2603d8399ae3946df08b0be84
SHA512

8a79174ca59a8c53d6f5e820f068abb9e2afa24c1f47ac46fc5325a9b612e1365711373eb34fe55141cc65adc560712296b03facc6cf2d6408059d28e6e6f5f3
SSDEEP

12288:4FTfM3+OeO+OeNhBBhhBBd1hzUGvXWoCwUA39w0b6lSydVuYMuOBb70BszJo1Wbz:41f71VXUA39w0b4SydVVGkUJo4OnLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5549e8943fcb60643dc032765675bc486cb7f2f2603d8399ae3946df08b0be84.bin.sample

Files

5549e8943fcb60643dc032765675bc486cb7f2f2603d8399ae3946df08b0be84.bin.sample
.dll windows:6 windows x86 arch:x86

e262ba4a7088b0b62554617623ba3935

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenMutexW
CreateProcessA
GetTickCount
GetModuleFileNameW
lstrcmpW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetVolumeInformationW
GetVolumePathNamesForVolumeNameW
CreateFileW
WriteFile
CloseHandle
CreateMutexW
ReadFile
SetFileAttributesW
WaitForSingleObject
CreateThread
MoveFileW
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
SetEndOfFile
WriteConsoleW
SetStdHandle
GetLastError
GetTempPathW
FindNextFileW
FindFirstFileW
GetFileSizeEx
FindClose
WaitForSingleObjectEx
Sleep
GetCurrentThreadId
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap

shell32

SHChangeNotify

advapi32

CryptReleaseContext
CryptAcquireContextA
RegSetValueExW
RegCreateKeyExW
CryptGenRandom

Exports

Exports

VisibleEntry

Sections

.text
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e262ba4a7088b0b62554617623ba3935

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

Exports

Exports

Sections

.text Size: 621KB - Virtual size: 620KB

.rdata Size: 131KB - Virtual size: 131KB

.data Size: 39KB - Virtual size: 48KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 621KB - Virtual size: 620KB

.rdata
Size: 131KB - Virtual size: 131KB

.data
Size: 39KB - Virtual size: 48KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 33KB - Virtual size: 33KB