40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864.bin
Size 7.5MB
Sample251121-mgqxtseq4z
SHA256 40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864
MD5 491274e52e9648897b876b9c60c784d6
SHA1 1a9da741c9f949cc17863c1dc4c6bd985cc3c299
SHA512 e7ce6a9c1cfc7550bce33f9cdeb22f5e68696cd4d1317434b7c7b97baf27fc251ad49d18cdfe822a46adcc5925006df4e92f7125a196409fa4e58d5139f643a8
SSDEEP 98304:0Jea/XR90dB+Ph3yRbPssdYa0ygwpB7zqIMB2uWq3xEF+09VM:ah90iPhCRfaa0ygkBzB8Bz3xv0s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864.bin

File Explorer

40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864.bin

.exe 7.5MB

40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864.bin

IMPHASH b0a6d1d8ad16a88245ef0b723ab8f5e3
SHA256 40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864
MD5 491274e52e9648897b876b9c60c784d6
SHA1 1a9da741c9f949cc17863c1dc4c6bd985cc3c299
SHA512 e7ce6a9c1cfc7550bce33f9cdeb22f5e68696cd4d1317434b7c7b97baf27fc251ad49d18cdfe822a46adcc5925006df4e92f7125a196409fa4e58d5139f643a8
SSDEEP 98304:0Jea/XR90dB+Ph3yRbPssdYa0ygwpB7zqIMB2uWq3xEF+09VM:ah90iPhCRfaa0ygkBzB8Bz3xv0s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7486272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey

user32

CharNextW LoadStringW PeekMessageW MsgWaitForMultipleObjects MessageBoxW LoadStringW GetSystemMetrics CharUpperBuffW CharUpperW CharLowerBuffW

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwindEx RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue LocalFree LocalAlloc GetModuleHandleW FreeLibrary WriteFile WideCharToMultiByte WaitForSingleObject VirtualQueryEx VirtualQuery VirtualProtect VirtualFree VerSetConditionMask VerifyVersionInfoW UnmapViewOfFile SwitchToThread SuspendThread Sleep SetThreadPriority SetLastError SetFileTime SetFilePointer SetEvent SetEndOfFile ResumeThread ResetEvent ReleaseSemaphore ReadFile RaiseException QueryDosDeviceW IsDebuggerPresent MapViewOfFile LocalFree LoadLibraryW LeaveCriticalSection IsValidLocale InitializeCriticalSection HeapSize HeapFree HeapDestroy HeapCreate HeapAlloc GetVolumeInformationW GetVersionExW GetTimeZoneInformation GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLogicalDrives GetLogicalDriveStringsW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileSize GetFileAttributesExW GetFileAttributesW GetExitCodeThread GetDriveTypeW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcess GetCPInfoExW GetCPInfo GetACP FreeLibrary FormatMessageW FindNextFileW FindFirstFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateSemaphoreA CreateFileMappingW CreateFileW CreateEventA CreateEventW CreateDirectoryW CompareStringW CloseHandle Sleep

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

netapi32

NetApiBufferFree NetWkstaGetInfo

msvcrt

memset memmove memcpy _beginthreadex

Name

.text

Size

7.2MB

Virtual Size

7.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

171KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

44KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

782B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

584B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

98KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

40d4cd5109435eaf242aa03a2c34efa87c06c9450b3d90b6f8ef7dcb161fb864.bin

oleaut32

advapi32

user32

kernel32

version

netapi32

msvcrt

generic