e0eb7b18c5c8e7420563753ab361b384781f8dec1d3a9976ad9a3f8e6488ad86[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
e0eb7b18c5c8e7420563753ab361b384781f8dec1d3a9976ad9a3f8e6488ad86.bin
Size 2.7MB
Sample260608-tz7rmacs2x
SHA256 e0eb7b18c5c8e7420563753ab361b384781f8dec1d3a9976ad9a3f8e6488ad86
MD5 01ae369db2898bb1e0daf24891e06558
SHA1 50d34b1d2a9c7df6db400f00ba13214549d1e3a0
SHA512 5bb99065e1e5d6506b96a11b712f392fc3dd832618a8d89992e30aa0fa67591493df814012e46bbd275d32bd0742797a39e6e31ca29c496d01c62f52d28c1807
SSDEEP 49152:+sj1eXhZcxg7Ff+NiToyFG2tLWSXltLdGb7I+KIergsb+xGAWk9CSsN189g:+sxmVltj+JsyxGJk4S08
TLSH
T1E1D58D0BA6FC40A5D9ABD174C61B4A0FD3F2B8114530839F95710BAE9FBFB61491E326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0eb7b18c5c8e7420563753ab361b384781f8dec1d3a9976ad9a3f8e6488ad86.bin

File Explorer

e0eb7b18c5c8e7420563753ab361b384781f8dec1d3a9976ad9a3f8e6488ad86.bin

.dll 2.7MB

e0eb7b18c5c8e7420563753ab361b384781f8dec1d3a9976ad9a3f8e6488ad86.bin

IMPHASH c9c4e68c63de842e93f2e2cd4c5b9f74
SHA256 e0eb7b18c5c8e7420563753ab361b384781f8dec1d3a9976ad9a3f8e6488ad86
MD5 01ae369db2898bb1e0daf24891e06558
SHA1 50d34b1d2a9c7df6db400f00ba13214549d1e3a0
SHA512 5bb99065e1e5d6506b96a11b712f392fc3dd832618a8d89992e30aa0fa67591493df814012e46bbd275d32bd0742797a39e6e31ca29c496d01c62f52d28c1807
SSDEEP 49152:+sj1eXhZcxg7Ff+NiToyFG2tLWSXltLdGb7I+KIergsb+xGAWk9CSsN189g:+sxmVltj+JsyxGJk4S08
TLSH
T1E1D58D0BA6FC40A5D9ABD174C61B4A0FD3F2B8114530839F95710BAE9FBFB61491E326
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1719516

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetACP GetOEMCP GetCPInfo GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode ReadConsoleW UnhandledExceptionFilter LCMapStringW OutputDebugStringW WriteConsoleW SetEnvironmentVariableA RtlVirtualUnwind RtlCaptureContext FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetModuleFileNameA GetStartupInfoW GetStdHandle GetFileType SetStdHandle GetSystemTimeAsFileTime VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation CreateFileA IsProcessorFeaturePresent IsDebuggerPresent ExitProcess ExitThread IsValidCodePage GetCommandLineA RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry FindResourceExW SearchPathW GetProfileIntW Sleep GetTempPathW GetTempFileNameW VerifyVersionInfoW VerSetConditionMask lstrcpyW GetWindowsDirectoryW GetFileTime GetFileSizeEx GetFileAttributesExW GetFileAttributesW FileTimeToLocalFileTime lstrcmpiW GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW TerminateProcess CreateThread SetUnhandledExceptionFilter FlushFileBuffers FindFirstFileW FindClose CreateFileW DeleteFileW GetCurrentDirectoryW GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW GlobalFlags GetThreadLocale FileTimeToSystemTime LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetTickCount WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW lstrcmpA GetVersionExW GetCurrentThread ResumeThread SetThreadPriority WaitForSingleObject CloseHandle GlobalGetAtomNameW GetCurrentProcessId QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GlobalFindAtomW GlobalAddAtomW LoadLibraryW lstrcmpW GlobalDeleteAtom LoadLibraryExW GetProcAddress GetModuleHandleExW GetModuleHandleW GetModuleFileNameW FreeResource FreeLibrary GetSystemDirectoryW LeaveCriticalSection EnterCriticalSection EncodePointer OutputDebugStringA WideCharToMultiByte MultiByteToWideChar CopyFileW FormatMessageW MulDiv LocalFree GlobalFree GlobalUnlock GlobalLock GlobalSize GlobalAlloc SetLastError DeleteCriticalSection InitializeCriticalSectionAndSpinCount HeapSize HeapFree HeapReAlloc GetLastError RaiseException DecodePointer FindResourceW SizeofResource LockResource LoadResource GetCurrentThreadId VirtualProtect GetProcessHeap HeapAlloc ReadFile GetFileSize SetFilePointerEx

user32

CreateMenu GetWindowRgn DrawIcon GetKeyboardLayout WaitMessage GetComboBoxInfo TrackMouseEvent MonitorFromPoint UpdateLayeredWindow IsMenu SetWindowRgn DrawFrameControl DrawStateW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard EnumDisplayMonitors SetLayeredWindowAttributes NotifyWinEvent InvertRect HideCaret EnableScrollBar GetAsyncKeyState GetIconInfo DrawIconEx DrawFocusRect GetMenuDefaultItem MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableW CharNextW PostThreadMessageW CharUpperW LockWindowUpdate WindowFromPoint KillTimer SetTimer UnionRect SendDlgItemMessageA CopyImage GetMenuItemInfoW RealChildWindowFromPoint GetSysColorBrush MapDialogRect SetWindowContextHelpId RegisterClipboardFormatW ShowOwnedPopups PostQuitMessage GetCursorPos TranslateMessage GetMessageW MapVirtualKeyW GetKeyNameTextW GetSystemMetrics IsZoomed SystemParametersInfoW SetParent IsRectEmpty DeleteMenu GetSystemMenu LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps CheckMenuItem ReuseDDElParam UnpackDDElParam LoadImageW DestroyIcon GetWindowThreadProcessId SetRectEmpty InsertMenuItemW DestroyMenu CreatePopupMenu LoadMenuW TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop SubtractRect GetDesktopWindow GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW GetLastActivePopup GetTopWindow GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW PtInRect AdjustWindowRectEx RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow ValidateRect SetForegroundWindow GetForegroundWindow SetActiveWindow TrackPopupMenu SetMenu GetMenu GetKeyState SetWindowPlacement GetWindowPlacement DestroyWindow IsChild CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW PostMessageW GetMessageTime GetMessagePos PeekMessageW DispatchMessageW RegisterWindowMessageW IsDialogMessageW GetWindow GetParent GetWindowTextLengthW GetWindowTextW SetWindowTextW IsWindowEnabled GetFocus SetFocus GetDlgCtrlID CheckDlgButton GetDlgItem ShowWindow IsWindow CopyRect FillRect ClientToScreen GetWindowDC GetDC RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetUpdateRect IsClipboardFormatAvailable TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar FrameRect CharUpperBuffW ModifyMenuW SetMenuDefaultItem CopyIcon GetDoubleClickTime SetClassLongPtrW GetSubMenu GetMenuState SetCursorPos DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyExW IsIconic IsCharLowerW GetMenuStringW DestroyCursor CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW SetWindowLongW GetWindowLongW EqualRect OffsetRect IntersectRect InflateRect SetRect MapWindowPoints ScreenToClient SetCursor EndPaint BeginPaint ReleaseDC GetDCEx TabbedTextOutW GrayStringW DrawTextExW DrawTextW ReleaseCapture SetCapture GetCapture EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPos MoveWindow DrawEdge UpdateWindow GetSysColor MessageBoxW EnableWindow IsWindowVisible LoadCursorW MessageBoxA GetWindowRect GetClientRect RedrawWindow InvalidateRect SendMessageW EnableMenuItem

gdi32

SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CombineRgn CreateFontIndirectW CreateRectRgnIndirect GetMapMode PatBlt SetRectRgn DPtoLP GetTextExtentPoint32W GetTextMetricsW CreateFontW GetCharWidthW StretchDIBits GetBkColor GetTextColor GetRgnBox CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse Polygon Polyline Rectangle EnumFontFamiliesExW OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx LPtoDP GetViewportOrgEx GetTextFaceW SetROP2 SetPolyFillMode GetLayout MoveToEx GetObjectW SetTextColor CreatePolygonRgn BitBlt SetLayout SetMapMode SetBkMode SetBkColor SelectPalette ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateBitmap GetDeviceCaps CreateDCW CopyMetaFileW ExtTextOutW TextOutW RectVisible PtVisible Escape SelectObject GetStockObject CreateCompatibleDC CreateCompatibleBitmap SetTextAlign

msimg32

GradientFill AlphaBlend TransparentBlt

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegCreateKeyExW RegEnumKeyExW RegEnumValueW RegSetValueExW RegDeleteValueW RegCloseKey RegQueryValueW RegEnumKeyW RegDeleteKeyW RegQueryValueExW RegOpenKeyExW

shell32

SHBrowseForFolderW DragFinish SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHAppBarMessage DragQueryFileW ShellExecuteW SHGetDesktopFolder

comctl32

ord17

shlwapi

PathFindFileNameW PathIsUNCW PathStripToRootW StrFormatKBSizeW PathFindExtensionW PathRemoveFileSpecW

uxtheme

DrawThemeText GetWindowTheme GetThemeSysColor GetCurrentThemeName DrawThemeBackground IsThemeBackgroundPartiallyTransparent DrawThemeParentBackground GetThemeColor IsAppThemed OpenThemeData CloseThemeData GetThemePartSize

ole32

StgCreateDocfileOnILockBytes CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CoRevokeClassObject CoGetClassObject CoDisconnectObject CLSIDFromProgID CLSIDFromString OleUninitialize OleInitialize CoFreeUnusedLibraries CoCreateInstance CoCreateGuid CoUninitialize ReleaseStgMedium OleDuplicateData StgOpenStorageOnILockBytes CoTaskMemFree CoTaskMemAlloc RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning DoDragDrop CreateStreamOnHGlobal CoInitializeEx CoInitialize CreateILockBytesOnHGlobal

oleaut32

SysFreeString OleCreateFontIndirect VarBstrFromDate VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen LoadTypeLi SysAllocString VariantChangeType VariantClear VariantInit SysAllocStringLen

oledlg

OleUIBusyW

oleacc

LresultFromObject CreateStdAccessibleObject AccessibleObjectFromWindow

gdiplus

GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipDrawImageRectI

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

GetHandleVerifier IsSandboxedProcess RelaunchChromeBrowserWithNewCommandLineIfNeeded cef_add_cross_origin_whitelist_entry cef_api_hash cef_base64decode cef_base64encode cef_begin_tracing cef_binary_value_create cef_browser_host_create_browser cef_browser_host_create_browser_sync cef_browser_view_create cef_browser_view_get_for_browser cef_clear_cross_origin_whitelist cef_clear_scheme_handler_factories cef_command_line_create cef_command_line_get_global cef_cookie_manager_create_manager cef_cookie_manager_get_blocking_manager cef_cookie_manager_get_global_manager cef_crash_reporting_enabled cef_create_context_shared cef_create_directory cef_create_new_temp_directory cef_create_temp_directory_in_directory cef_create_url cef_currently_on cef_delete_file cef_dictionary_value_create cef_directory_exists cef_display_get_alls cef_display_get_count cef_display_get_matching_bounds cef_display_get_nearest_point cef_display_get_primary cef_do_message_loop_work cef_drag_data_create cef_enable_highdpi_support cef_end_tracing cef_execute_java_script_with_user_gesture_for_tests cef_execute_process cef_format_url_for_security_display cef_get_current_platform_thread_handle cef_get_current_platform_thread_id cef_get_extensions_for_mime_type cef_get_mime_type cef_get_min_log_level cef_get_path cef_get_temp_directory cef_get_vlog_level cef_image_create cef_initialize cef_is_cert_status_error cef_is_cert_status_minor_error cef_is_web_plugin_unstable cef_label_button_create cef_launch_process cef_list_value_create cef_load_crlsets_file cef_log cef_menu_button_create cef_menu_model_create cef_now_from_system_trace_time cef_panel_create cef_parse_json cef_parse_jsonand_return_error cef_parse_url cef_post_data_create cef_post_data_element_create cef_post_delayed_task cef_post_task cef_print_settings_create cef_process_message_create cef_quit_message_loop cef_refresh_web_plugins cef_register_extension cef_register_scheme_handler_factory cef_register_web_plugin_crash cef_register_widevine_cdm cef_remove_cross_origin_whitelist_entry cef_request_context_create_context cef_request_context_get_global_context cef_request_create cef_resource_bundle_get_global cef_response_create cef_run_message_loop cef_scroll_view_create cef_server_create cef_set_crash_key_value cef_set_osmodal_loop cef_shutdown cef_stream_reader_create_for_data cef_stream_reader_create_for_file cef_stream_reader_create_for_handler cef_stream_writer_create_for_file cef_stream_writer_create_for_handler cef_string_ascii_to_utf16 cef_string_ascii_to_wide cef_string_list_alloc cef_string_list_append cef_string_list_clear cef_string_list_copy cef_string_list_free cef_string_list_size cef_string_list_value cef_string_map_alloc cef_string_map_append cef_string_map_clear cef_string_map_find cef_string_map_free cef_string_map_key cef_string_map_size cef_string_map_value cef_string_multimap_alloc cef_string_multimap_append cef_string_multimap_clear cef_string_multimap_enumerate cef_string_multimap_find_count cef_string_multimap_free cef_string_multimap_key cef_string_multimap_size cef_string_multimap_value cef_string_userfree_utf16_alloc cef_string_userfree_utf16_free cef_string_userfree_utf8_alloc cef_string_userfree_utf8_free cef_string_userfree_wide_alloc cef_string_userfree_wide_free cef_string_utf16_clear cef_string_utf16_cmp cef_string_utf16_set cef_string_utf16_to_lower cef_string_utf16_to_upper cef_string_utf16_to_utf8 cef_string_utf16_to_wide cef_string_utf8_clear cef_string_utf8_cmp cef_string_utf8_set cef_string_utf8_to_utf16 cef_string_utf8_to_wide cef_string_wide_clear cef_string_wide_cmp cef_string_wide_set cef_string_wide_to_utf16 cef_string_wide_to_utf8 cef_task_runner_get_for_current_thread cef_task_runner_get_for_thread cef_textfield_create cef_thread_create cef_time_delta cef_time_from_doublet cef_time_from_timet cef_time_now cef_time_to_doublet cef_time_to_timet cef_trace_counter cef_trace_counter_id cef_trace_event_async_begin cef_trace_event_async_end cef_trace_event_async_step_into cef_trace_event_async_step_past cef_trace_event_begin cef_trace_event_end cef_trace_event_instant cef_translator_test_create cef_translator_test_ref_ptr_library_child_child_create cef_translator_test_ref_ptr_library_child_create cef_translator_test_ref_ptr_library_create cef_translator_test_scoped_library_child_child_create cef_translator_test_scoped_library_child_create cef_translator_test_scoped_library_create cef_unregister_internal_web_plugin cef_uridecode cef_uriencode cef_urlrequest_create cef_v8context_get_current_context cef_v8context_get_entered_context cef_v8context_in_context cef_v8stack_trace_get_current cef_v8value_create_array cef_v8value_create_array_buffer cef_v8value_create_bool cef_v8value_create_date cef_v8value_create_double cef_v8value_create_function cef_v8value_create_int cef_v8value_create_null cef_v8value_create_object cef_v8value_create_string cef_v8value_create_uint cef_v8value_create_undefined cef_value_create cef_version_info cef_visit_web_plugin_info cef_waitable_event_create cef_window_create_top_level cef_write_json cef_xml_reader_create cef_zip_directory cef_zip_reader_create