12bddbf68270febab89eaccbaa3e2fe64d54eb8886c1b125fc7035eca823c624[.]bin

General

Target
12bddbf68270febab89eaccbaa3e2fe64d54eb8886c1b125fc7035eca823c624.bin
Size 90KB
Sample260804-dwwxyscc25
SHA256 12bddbf68270febab89eaccbaa3e2fe64d54eb8886c1b125fc7035eca823c624
MD5 9d381d28e64e584f90ae14bdbfdb20f6
SHA1 358127341bb590f6e2a4f4f96071f521849dea59
SHA512 a66d77e4fdee2d776c44cad9ae9ec2fbbbf22692b5a8e18cf6816ee672b134527d09a2192c3cdf7e2dcfada45e5088fe374dba8635d7502484c2f2986fd8bac4
SSDEEP 1536:/+gisi/OTW1bk3FwErVvHcTCBignpwLsO9NXw6dc3o+:/IZ1bk1FVvHcTUO4O9fc3o+
TLSH
T100933C01E4214172E06344F1ABBA56B9E168DED133812EE7839CFCB51B758E27BB245F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12bddbf68270febab89eaccbaa3e2fe64d54eb8886c1b125fc7035eca823c624.bin

File Explorer

12bddbf68270febab89eaccbaa3e2fe64d54eb8886c1b125fc7035eca823c624.bin

.exe 90KB

12bddbf68270febab89eaccbaa3e2fe64d54eb8886c1b125fc7035eca823c624.bin

IMPHASH 79b96456f9efc94c33ade5e8ec421b2f
SHA256 12bddbf68270febab89eaccbaa3e2fe64d54eb8886c1b125fc7035eca823c624
MD5 9d381d28e64e584f90ae14bdbfdb20f6
SHA1 358127341bb590f6e2a4f4f96071f521849dea59
SHA512 a66d77e4fdee2d776c44cad9ae9ec2fbbbf22692b5a8e18cf6816ee672b134527d09a2192c3cdf7e2dcfada45e5088fe374dba8635d7502484c2f2986fd8bac4
SSDEEP 1536:/+gisi/OTW1bk3FwErVvHcTCBignpwLsO9NXw6dc3o+:/IZ1bk1FVvHcTUO4O9fc3o+
TLSH
T100933C01E4214172E06344F1ABBA56B9E168DED133812EE7839CFCB51B758E27BB245F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5293

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId CloseHandle CreateFileA GetModuleFileNameA Sleep CreateThread SetLastError GetLastError TerminateProcess OpenProcess ReadFile GetFileSize WriteFile SetFilePointer SetFileAttributesA GetLocalTime ResumeThread SetThreadContext VirtualProtectEx WriteProcessMemory VirtualAllocEx IsBadReadPtr FreeLibrary GetProcAddress LoadLibraryA ReadProcessMemory GetThreadContext CreateProcessA GetCurrentDirectoryA GetWindowsDirectoryA MapViewOfFile OpenFileMappingA GetCommandLineA GetModuleHandleA GetTempFileNameA GetTempPathA DeleteFileA CopyFileA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA GetProcessVersion lstrcmpiA WideCharToMultiByte MultiByteToWideChar

user32

MessageBoxA

msvcrt

memcpy ??3@YAXPAX@Z ftell fclose fread fseek strcpy __CxxFrameHandler _wcsnicmp wcscpy fwrite time memset strcat strlen ??2@YAPAXI@Z _strnicmp fopen wcslen _itoa _wcsicmp

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z ??0_Lockit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

Sharing