eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1[.]bin

Resubmissions

06/11/2025, 18:41

251106-xb8ksstqav10

04/11/2025, 15:22

251104-ssaymsdm5t10

Sharing

Copy URL Twitter E-mail

General

Target
eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1.bin
Size 336KB
Sample251104-ssaymsdm5t
SHA256 eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1
MD5 76a856dc0693c07cea7c94e6bc85fcbb
SHA1 cb693d8d428f549e17f62206126e3c46b91c93e3
SHA512 aaf03a90713f5a9ebed70d57a33d403159ab4ac05bf77d5afb8daac5faa274c55d57bac824abd4d93828162a96cc968716ffcdeaed17e54d10232d0871129355
SSDEEP 6144:0m+j+Hzhw70XE8ph76kPOlpPFcFyUbSkxLohRmeNw8t:0m+jUPth76iOlptsyUGkOhFNT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1.bin

File Explorer

eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1.bin

.exe 336KB

eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1.bin

IMPHASH 3df037d482ab9fca35b272db57fa1128
SHA256 eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1
MD5 76a856dc0693c07cea7c94e6bc85fcbb
SHA1 cb693d8d428f549e17f62206126e3c46b91c93e3
SHA512 aaf03a90713f5a9ebed70d57a33d403159ab4ac05bf77d5afb8daac5faa274c55d57bac824abd4d93828162a96cc968716ffcdeaed17e54d10232d0871129355
SSDEEP 6144:0m+j+Hzhw70XE8ph76kPOlpPFcFyUbSkxLohRmeNw8t:0m+jUPth76iOlptsyUGkOhFNT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

138748

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

AppendMenuW CloseClipboard CreatePopupMenu DefWindowProcW DestroyMenu GetClipboardData GetCursorPos OpenClipboard PostQuitMessage SetForegroundWindow TrackPopupMenu UnregisterHotKey

kernel32

CloseHandle CompareStringW CreateFileA CreateFileW CreateThread DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushInstructionCache FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetExitCodeThread GetFileSize GetFileType GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile lstrcpynW

ole32

CLSIDFromProgID CoCreateInstance

oleaut32

VariantClear VariantInit

shell32

Shell_NotifyIconW

wininet

InternetCloseHandle InternetOpenUrlW InternetOpenW InternetReadFile

Name

.text

Size

191KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.bss

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

eaf6f9bf7233e2ef0ae136bdf09eb78d494568b277f7aa53a73830a070ebaaa1.bin

user32

kernel32

ole32

oleaut32

shell32

wininet

generic