e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c[.]bin

General

Target
e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c.bin
Size 1.5MB
Sample250925-scrapabq41
SHA256 e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c
MD5 7d47ff8d5935b500022620ddccf39534
SHA1 26f3f8c05217141799f1b03ae3af095452bb8f79
SHA512 7f4f3d75dfa3a737ef0d87938cf63d969e521d491a394dbbf4324596ac703fc5b5487be331a7c01f2e34dda1e36e697cc6973d50111cfb630e68a2795863da18
SSDEEP 24576:9Qb60rv833KVuHQkX4vzSvbneUDVP8i9wYXc9gckWVRSCu67:462v8327k2bUDVP8i9ls9gchVRZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c.bin

File Explorer

e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c.bin

.exe 1.5MB

e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c.bin

IMPHASH 1ce39e07a979f0e3da342ee46f74268b
SHA256 e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c
MD5 7d47ff8d5935b500022620ddccf39534
SHA1 26f3f8c05217141799f1b03ae3af095452bb8f79
SHA512 7f4f3d75dfa3a737ef0d87938cf63d969e521d491a394dbbf4324596ac703fc5b5487be331a7c01f2e34dda1e36e697cc6973d50111cfb630e68a2795863da18
SSDEEP 24576:9Qb60rv833KVuHQkX4vzSvbneUDVP8i9wYXc9gckWVRSCu67:462v8327k2bUDVP8i9ls9gchVRZ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

792984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AcquireSRWLockExclusive CloseHandle CreateFileW CreateThread DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeConsole FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetUserDefaultLCID GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale K32EnumProcesses LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

CreateWindowExW DispatchMessageW GetMessageW LoadCursorW TranslateMessage

Name

.text

Size

916KB

Virtual Size

920KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

81KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.iat

Size

484KB

Virtual Size

484KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

e710a31ff8378f46884faf780feb8881a1bb58c959ebd62e761b68d4c31abe0c.bin

kernel32

user32

generic