250516-e18yrayjx8[.]bin

General

Target
250516-e18yrayjx8.bin
Size 848KB
Sample250516-gd4fvsaj21
SHA256 af47bed31dccde8b7f61405facf49ac172e7a58af7449e53373166b58cc6052f
MD5 054163a5c03b3729bef9f9dd63ff7945
SHA1 6eccd0c7a2e7519f083ad9ee14dcbf97f02e7748
SHA512 d764c583f1c159fa305c72c8c0c40c6a15ca74818d7cb3cd0e4d51eae5922544be5780dd29ad19cfde91bf248aa8b36feda842cf4f4ee450cb4e029d33ad3665
SSDEEP 12288:wNK8zfRHTVvV/iicxxOdUnyRsy8xLtNalpxIEdRgHCF7RuOwFQLQN41APA31uIEz:QK8zxhtafyS2jIEiCiQGk1f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
250516-e18yrayjx8.bin

File Explorer

250516-e18yrayjx8.bin

.dll 848KB

250516-e18yrayjx8.bin

IMPHASH f4f63e9c9e54a0497e774f15ebdcf087
SHA256 af47bed31dccde8b7f61405facf49ac172e7a58af7449e53373166b58cc6052f
MD5 054163a5c03b3729bef9f9dd63ff7945
SHA1 6eccd0c7a2e7519f083ad9ee14dcbf97f02e7748
SHA512 d764c583f1c159fa305c72c8c0c40c6a15ca74818d7cb3cd0e4d51eae5922544be5780dd29ad19cfde91bf248aa8b36feda842cf4f4ee450cb4e029d33ad3665
SSDEEP 12288:wNK8zfRHTVvV/iicxxOdUnyRsy8xLtNalpxIEdRgHCF7RuOwFQLQN41APA31uIEz:QK8zxhtafyS2jIEiCiQGk1f
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

383988

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\LoneBox\Fattube\FruitHole\Row.pdb

kernel32

Sleep FlushFileBuffers GetModuleHandleA EnterCriticalSection SetFileAttributesA IsBadReadPtr GetLocaleInfoA WriteConsoleW InitializeCriticalSection SetErrorMode VirtualProtect LocalFree LocalAlloc GlobalFree CreateProcessA GlobalAlloc WideCharToMultiByte MultiByteToWideChar GetStringTypeW LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind InterlockedFlushSList GetLastError FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetFileType GetFileSizeEx SetFilePointerEx CloseHandle WriteFile GetConsoleCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle ReadConsoleW HeapSize CreateFileW

cryptui

CryptUIWizExport CryptUIDlgViewCertificateA CryptUIWizFreeDigitalSignContext CryptUIWizDigitalSign CryptUIDlgSelectCertificateFromStore CryptUIDlgViewContext CryptUIWizImport

Sharing