sub_9a55f5588628[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
sub_9a55f5588628.bin
Size 542KB
Sample260524-b3dzlsd14m
SHA256 9a55f55886285eef7ffabdd55c0232d1458175b1d868c03d3e304ce7d98980bc
MD5 c115bbbdb1a61f8c553d74802bfd78fb
SHA1 1f439569e3c1c14ea9f02235f8f45c49e2764160
SHA512 6ad701415ce5e1f94144a979f7e347499ecd80e4de4705dbe9570ad53a90b58034ea98f2ec9d257a330ec47ffeacdbd420f581ad8a4d76b0c7ad4bb198b1ab84
SSDEEP 12288:trkm8R9qXgmj3d7khtgfpedbKbiTuDZWhswtik5j2w+f:2Ujt7+twpedbKb1dWhse9K
TLSH
T13DC47D217491C07AD67243F14DACDB9135BEEC300F621ACBE3C45A6D177C9E16A329BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sub_9a55f5588628.bin

File Explorer

sub_9a55f5588628.bin

.exe 542KB

sub_9a55f5588628.bin

IMPHASH d3ecbcdc42366082ef5827cc2473d4e3
SHA256 9a55f55886285eef7ffabdd55c0232d1458175b1d868c03d3e304ce7d98980bc
MD5 c115bbbdb1a61f8c553d74802bfd78fb
SHA1 1f439569e3c1c14ea9f02235f8f45c49e2764160
SHA512 6ad701415ce5e1f94144a979f7e347499ecd80e4de4705dbe9570ad53a90b58034ea98f2ec9d257a330ec47ffeacdbd420f581ad8a4d76b0c7ad4bb198b1ab84
SSDEEP 12288:trkm8R9qXgmj3d7khtgfpedbKbiTuDZWhswtik5j2w+f:2Ujt7+twpedbKb1dWhse9K
TLSH
T13DC47D217491C07AD67243F14DACDB9135BEEC300F621ACBE3C45A6D177C9E16A329BA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

216827

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wldap32

ord14 ord13 ord88 ord215 ord41 ord72 ord26 ord191 ord135 ord206 ord224 ord140 ord27 ord145

kernel32

SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetCurrentDirectoryW CreateFileW FindClose FindFirstFileW FindFirstVolumeW FindNextFileW FindNextVolumeW FindVolumeClose GetFileAttributesW GetFileAttributesExW GetFullPathNameW GetVolumeInformationW GetTempPathW GetVolumePathNamesForVolumeNameW CloseHandle GetLastError DeviceIoControl ReleaseMutex CreateMutexW OpenMutexW HeapSize GetCurrentProcessId GetTickCount GetModuleFileNameW LocalAlloc LocalFree FormatMessageW CopyFileW MoveFileW FreeConsole GetComputerNameExW EnumSystemLocalesW GetACP IsValidCodePage FindFirstFileExW GetTimeZoneInformation HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetConsoleOutputCP WriteConsoleW SetEndOfFile WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileType Sleep FormatMessageA WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx TryEnterCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW QueryPerformanceCounter CompareStringW GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx CompareStringEx GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW InitializeSListHead GetCurrentProcess TerminateProcess RaiseException RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW SetFileAttributesW CreateThread ExitThread FreeLibraryAndExitThread GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW FlushFileBuffers

user32

SystemParametersInfoW

shell32

SHChangeNotify

ole32

CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocStringLen SysAllocString VariantInit

advapi32

RegSetValueExW RegCreateKeyExW SetSecurityDescriptorDacl SetFileSecurityW InitializeSecurityDescriptor AllocateAndInitializeSid SetEntriesInAclW