sub_d6255b4b18e6[.]bin

General

Target
sub_d6255b4b18e6.bin
Size 750KB
Sample260524-b58a8set9l
SHA256 d6255b4b18e6f07c4708cf6344163dfe3197cf403957bf3085a6a737bb37b038
MD5 979d1d97ef97c7ae5737a88e87757ec4
SHA1 90d243cb67821975da1b13582476779eff5be9a5
SHA512 05c60e3714d906ea985a923ebda9e2efca17dfe29bfe9169f8e14f7053dd2871d9fa6bafb1d56919c07041be8841cfba82811ac1868398e2587ca25433727b4f
SSDEEP 12288:7RC0TWlTuoyPO3DwWUhREG4HR7cOIiatuSgw8ibKmYjoCM0G3Pll93USBfC:vWlTuzWNOiarzYjoj0G/ll9o
TLSH
T1E1F4F1207790C434F5F652F849BA83B9A93C7EB06B3461CB62D52EEE46342E4AC31757
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sub_d6255b4b18e6.bin

File Explorer

sub_d6255b4b18e6.bin

.exe 750KB

sub_d6255b4b18e6.bin

IMPHASH df9f8478a5324ab8dd6d2dd50515fa50
SHA256 d6255b4b18e6f07c4708cf6344163dfe3197cf403957bf3085a6a737bb37b038
MD5 979d1d97ef97c7ae5737a88e87757ec4
SHA1 90d243cb67821975da1b13582476779eff5be9a5
SHA512 05c60e3714d906ea985a923ebda9e2efca17dfe29bfe9169f8e14f7053dd2871d9fa6bafb1d56919c07041be8841cfba82811ac1868398e2587ca25433727b4f
SSDEEP 12288:7RC0TWlTuoyPO3DwWUhREG4HR7cOIiatuSgw8ibKmYjoCM0G3Pll93USBfC:vWlTuzWNOiarzYjoj0G/ll9o
TLSH
T1E1F4F1207790C434F5F652F849BA83B9A93C7EB06B3461CB62D52EEE46342E4AC31757
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yigewinepihig\susazuv\zojefux\gizuhoponagen\gediyome35 fi.pdb

kernel32

GetFileSize GlobalDeleteAtom SetFilePointer lstrlenA CopyFileExW SetLocalTime CommConfigDialogA MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GlobalLock GetComputerNameW CreateDirectoryExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile FindActCtxSectionStringA TlsSetValue GlobalAlloc GetSystemDirectoryW VirtualFreeEx LoadLibraryW GetConsoleMode _hread GetSystemWow64DirectoryW SetSystemTimeAdjustment GlobalFlags GetBinaryTypeA GetAtomNameW ReadFile ExitThread SetConsoleTitleA VirtualUnlock DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress GetProcessHeaps GetComputerNameExW CreateNamedPipeA SetStdHandle SetComputerNameA VerLanguageNameW LoadLibraryA Process32FirstW CreateSemaphoreW SetCalendarInfoW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW SetConsoleWindowInfo FindAtomA Process32NextW QueryMemoryResourceNotification WriteProfileStringW BuildCommDCBA VirtualProtect CompareStringA GetFileAttributesExW _lopen TlsAlloc GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetProfileSectionW LCMapStringW DeleteFileA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP InitializeCriticalSectionAndSpinCount FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

user32

GetMenuInfo GetListBoxInfo

Sharing