cat_binaria[.]vmp[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
cat_binaria.vmp.dll
Size 12.2MB
Sample260706-ex384adv3n
SHA256 3e6d124cfd0bfccc0b99c3f0c73996d186d61f3fa6e9b009e084f10952c48bce
MD5 c6ad54c8184906965bb59f4cef2b0460
SHA1 c4a1ff707eb031258ce45567160fd128bb59b734
SHA512 68fe8e28630b69394c3e20cc1b312f6f21265529eaa5215e9794b11614cd976bd43502959d51f51f7d3068f9dab9d110667d1933d536c2162a725f892b585e7a
SSDEEP 196608:M+bcKVPREQVlMnWNRLX7YWi4RUFQZIthQ9wUGdLC8+Tz9ZfFhth:M+gCSQVRRLLYZUUmkhDdW8+TPt
TLSH
T190D623EE94D562E4C6D347D0739A53CE3291601E4A6DAC3D3BCA2D01AE23C5F864ED27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cat_binaria.vmp.dll

File Explorer

cat_binaria.vmp.dll

.dll 12.2MB

cat_binaria.vmp.dll

IMPHASH 32942f63a00255324c07e17c686a6b6e
SHA256 3e6d124cfd0bfccc0b99c3f0c73996d186d61f3fa6e9b009e084f10952c48bce
MD5 c6ad54c8184906965bb59f4cef2b0460
SHA1 c4a1ff707eb031258ce45567160fd128bb59b734
SHA512 68fe8e28630b69394c3e20cc1b312f6f21265529eaa5215e9794b11614cd976bd43502959d51f51f7d3068f9dab9d110667d1933d536c2162a725f892b585e7a
SSDEEP 196608:M+bcKVPREQVlMnWNRLX7YWi4RUFQZIthQ9wUGdLC8+Tz9ZfFhth:M+gCSQVRRLLYZUUmkhDdW8+TPt
TLSH
T190D623EE94D562E4C6D347D0739A53CE3291601E4A6DAC3D3BCA2D01AE23C5F864ED27
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16571180

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

bcryptprimitives

ProcessPrng

crypt32

CryptUnprotectData

kernel32

GetFullPathNameA GetSystemTimeAsFileTime HeapAlloc HeapFree ExitProcess GetModuleHandleA LoadLibraryA GetProcAddress

oleaut32

VariantClear

api-ms-win-core-synch-l1-2-0

WaitOnAddress

advapi32

RegCloseKey

ws2_32

shutdown

secur32

FreeCredentialsHandle

ntdll

NtCreateFile

user32

EnumDisplayMonitors

gdi32

StretchBlt

ole32

CoCreateInstance

pdh

PdhCollectQueryData

psapi

GetPerformanceInfo

netapi32

NetApiBufferFree

powrprof

CallNtPowerInformation

shell32

CommandLineToArgvW

iphlpapi

GetIfTable2

vcruntime140

__std_type_info_destroy_list

api-ms-win-crt-math-l1-1-0

floor

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_cexit

Name

.text

Size

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

794KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.T%T

Size

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Pnb

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.314

Size

12.2MB

Virtual Size

12.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cat_binaria.vmp.dll

bcryptprimitives

crypt32

kernel32

oleaut32

api-ms-win-core-synch-l1-2-0

advapi32

ws2_32

secur32

ntdll

user32

gdi32

ole32

pdh

psapi

netapi32

powrprof

shell32

iphlpapi

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic