d58ae749efbc1928393ec05cfb259b90d97dc62ac99e63a4fecb61d7e051598e[.]bin

General

Target
d58ae749efbc1928393ec05cfb259b90d97dc62ac99e63a4fecb61d7e051598e.bin
Size 88KB
Sample260801-bpptysvcld
SHA256 d58ae749efbc1928393ec05cfb259b90d97dc62ac99e63a4fecb61d7e051598e
MD5 3e5765596abff6429fd9566d0e1e0929
SHA1 f9421c78c5a69d6beb73fea0a507a1b8fb88893e
SHA512 14032375f42665d0cb2c594c3a62fe0af947819d22316e17b7ac7959ba2138534e8d61d1c0a5276db913cc1d3b4cc2008ef7306a3ecdd92166bdbe94bf7cde6b
SSDEEP 1536:v+gisi/OTW1bk3FwErVvHcT3BignpwLsO9NXw6dcQ:vIZ1bk1FVvHcTBO4O9fcQ
TLSH
T1B6934C01E4215172E06244F1ABBA56B9E168CFE133812EE7839CFCB51B758E27B7245F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d58ae749efbc1928393ec05cfb259b90d97dc62ac99e63a4fecb61d7e051598e.bin

File Explorer

d58ae749efbc1928393ec05cfb259b90d97dc62ac99e63a4fecb61d7e051598e.bin

.exe 88KB

d58ae749efbc1928393ec05cfb259b90d97dc62ac99e63a4fecb61d7e051598e.bin

IMPHASH 79b96456f9efc94c33ade5e8ec421b2f
SHA256 d58ae749efbc1928393ec05cfb259b90d97dc62ac99e63a4fecb61d7e051598e
MD5 3e5765596abff6429fd9566d0e1e0929
SHA1 f9421c78c5a69d6beb73fea0a507a1b8fb88893e
SHA512 14032375f42665d0cb2c594c3a62fe0af947819d22316e17b7ac7959ba2138534e8d61d1c0a5276db913cc1d3b4cc2008ef7306a3ecdd92166bdbe94bf7cde6b
SSDEEP 1536:v+gisi/OTW1bk3FwErVvHcT3BignpwLsO9NXw6dcQ:vIZ1bk1FVvHcTBO4O9fcQ
TLSH
T1B6934C01E4215172E06244F1ABBA56B9E168CFE133812EE7839CFCB51B758E27B7245F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5293

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId CloseHandle CreateFileA GetModuleFileNameA Sleep CreateThread SetLastError GetLastError TerminateProcess OpenProcess ReadFile GetFileSize WriteFile SetFilePointer SetFileAttributesA GetLocalTime ResumeThread SetThreadContext VirtualProtectEx WriteProcessMemory VirtualAllocEx IsBadReadPtr FreeLibrary GetProcAddress LoadLibraryA ReadProcessMemory GetThreadContext CreateProcessA GetCurrentDirectoryA GetWindowsDirectoryA MapViewOfFile OpenFileMappingA GetCommandLineA GetModuleHandleA GetTempFileNameA GetTempPathA DeleteFileA CopyFileA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA GetProcessVersion lstrcmpiA WideCharToMultiByte MultiByteToWideChar

user32

MessageBoxA

msvcrt

memcpy ??3@YAXPAX@Z ftell fclose fread fseek strcpy __CxxFrameHandler _wcsnicmp wcscpy fwrite time memset strcat strlen ??2@YAPAXI@Z _strnicmp fopen wcslen _itoa _wcsicmp

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z ??0_Lockit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

Sharing