doc-fac[.]bin | Triage™

General

Target
doc-fac.bin
Size 18KB
Sample260731-plhhcsttbx
SHA256 e71b7fd8a38ace53045a576a8498f11a81c2d8f66b93086317c250dff5430429
MD5 0e2d4b36f015abe75e8a3be0ff4257e3
SHA1 53f852158655029bf42c478c08c0fd61024fbc0e
SHA512 2278aafabed49f4dbac583ee0575a3c251ee12c766629dc1eb701db80e72b11c39eced653b923a641610b9c07a755b869db50cc3fc244ed1b24f80c97bf084c4
SSDEEP 384:s3vOEFN8n1zt1o2nWXEd2j9v8bLTBHFBlj8F4a8GCGItwjm:s/oK2WUd2J0bLBFTN
TLSH
T195820A87E26104E6C973D53CE652AA1AB5B3B8566B321BDF4B210A1B4F317D4B23CF14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
doc-fac.bin

File Explorer

doc-fac.bin

.xll 18KB

doc-fac.bin

IMPHASH 8341f477b472c677846eb3e45a02bddf
SHA256 e71b7fd8a38ace53045a576a8498f11a81c2d8f66b93086317c250dff5430429
MD5 0e2d4b36f015abe75e8a3be0ff4257e3
SHA1 53f852158655029bf42c478c08c0fd61024fbc0e
SHA512 2278aafabed49f4dbac583ee0575a3c251ee12c766629dc1eb701db80e72b11c39eced653b923a641610b9c07a755b869db50cc3fc244ed1b24f80c97bf084c4
SSDEEP 384:s3vOEFN8n1zt1o2nWXEd2j9v8bLTBHFBlj8F4a8GCGItwjm:s/oK2WUd2J0bLBFTN
TLSH
T195820A87E26104E6C973D53CE652AA1AB5B3B8566B321BDF4B210A1B4F317D4B23CF14
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

winhttp

WinHttpReadData WinHttpOpen WinHttpQueryDataAvailable WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpCloseHandle WinHttpConnect

advapi32

CryptReleaseContext CryptDestroyHash CryptHashData CryptCreateHash CryptDecrypt CryptImportKey CryptGetHashParam CryptSetKeyParam CryptDestroyKey CryptAcquireContextW

kernel32

GetProcAddress QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead MultiByteToWideChar GetLastError GlobalMemoryStatusEx WideCharToMultiByte CloseHandle TerminateProcess ResumeThread CreateProcessA VirtualFree VirtualAlloc GetModuleHandleA

vcruntime140

__std_type_info_destroy_list __C_specific_handler memset memcpy

api-ms-win-crt-heap-l1-1-0

malloc realloc free

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-runtime-l1-1-0

_cexit _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _execute_onexit_table

Sharing