994539855377a216b90c1db4f77fdd60dd89aa2296a19345cf19d9591419809e[.]bin[.]sample[.]gz

Sharing

Copy URL Twitter E-mail

General

Target
994539855377a216b90c1db4f77fdd60dd89aa2296a19345cf19d9591419809e.bin.sample.gz
Size 154KB
Sample241229-tgp4vstrht
SHA256 597a05e82a6716a0d6326ad61f746dfe7bcc04ea5a606bba6ddb60c2ed358aa6
MD5 9538b3184f9ac21b4b6b095f8896b2d1
SHA1 e179756d06f3b96414dcf153bb473952c656117b
SHA512 f0220fde29ea5eab8b08299411f2e248feb0471250b2a5b3290b942a521c1a4453e1f0c529a2c93396035e7b60fe6bea1f00b098628768ddd4fa71f6943e2513
SSDEEP 3072:L9DLte9hC6bK/agsXrBhNPaX6U/ZR0QMR5ul22lOuw:L3e9hC+K/ENhNrGR0lPd2lOuw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sample

File Explorer

994539855377a216b90c1db4f77fdd60dd89aa2296a19345cf19d9591419809e.bin.sample.gz

.gz 154KB
sample

.exe 280KB

994539855377a216b90c1db4f77fdd60dd89aa2296a19345cf19d9591419809e.bin.sample.gz

SHA256 597a05e82a6716a0d6326ad61f746dfe7bcc04ea5a606bba6ddb60c2ed358aa6
MD5 9538b3184f9ac21b4b6b095f8896b2d1
SHA1 e179756d06f3b96414dcf153bb473952c656117b
SHA512 f0220fde29ea5eab8b08299411f2e248feb0471250b2a5b3290b942a521c1a4453e1f0c529a2c93396035e7b60fe6bea1f00b098628768ddd4fa71f6943e2513
SSDEEP 3072:L9DLte9hC6bK/agsXrBhNPaX6U/ZR0QMR5ul22lOuw:L3e9hC+K/ENhNrGR0lPd2lOuw
MD5 SHA1 SHA512 SSDEEP

sample

IMPHASH b0ebe07bcb894d80d9f92c2210855398
SHA256 994539855377a216b90c1db4f77fdd60dd89aa2296a19345cf19d9591419809e
MD5 badc00888b75a7a568d5a2b3d0cb6451
SHA1 10e2dde399f369bab14eba5acfa06a923394aa33
SHA512 5d00ce31011d460a34446469382b4151d0a241853b925b979da4b758336ff3416ef93b77c31666d1b846fc0ab1e242b34c400ef5b8c2f33cc725d1c39d3d4c7f
SSDEEP 6144:EjWkd35a63FC6EkbwO+ZfhluCm9At1sotV50DErPtld:EjWk130CbwOouCmouDel
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

153315

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Project\Project3000\Release\Project3000.pdb

mpr

WNetOpenEnumW WNetEnumResourceW WNetCloseEnum

crypt32

CryptStringToBinaryA

kernel32

GetCommandLineW GetCurrentProcess lstrlenW WriteFile GetModuleFileNameW SetErrorMode SetFilePointer GetQueuedCompletionStatus SetEndOfFile GetTempPathW lstrlenA GetVolumePathNameW CreateFileW ResumeThread OpenProcess PostQueuedCompletionStatus Sleep GetLastError lstrcatW CloseHandle GetSystemInfo CreateThread HeapAlloc GetLogicalDrives GetFileSize ExitProcess HeapFree GetConsoleWindow CreateProcessA GetSystemTime CreateIoCompletionPort GetDriveTypeW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetStdHandle GetFileType GetVolumeInformationW GetModuleFileNameA ReadFile GetProcessHeap GetFileSizeEx SetFilePointerEx WriteConsoleW GetWindowsDirectoryW FindClose LCMapStringW CompareStringW LocalFree FormatMessageA GetLocaleInfoEx DecodePointer FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetModuleHandleW GetProcAddress MoveFileExW GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetCPInfo GetModuleHandleExW GetStdHandle GetCommandLineA GetStringTypeW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

user32

wsprintfA ShowWindow RegisterHotKey wsprintfW SendMessageW GetMessageW GetWindowThreadProcessId GetShellWindow

advapi32

SystemFunction036 RevertToSelf RegCloseKey RegSetValueExW OpenProcessToken SetThreadToken RegOpenKeyExW DuplicateToken GetTokenInformation

shell32

SHGetPathFromIDListW ShellExecuteExW CommandLineToArgvW SHBrowseForFolderW