f0044f13be1dcfadb49178b3556d60385b978c84875fa3ab949556e4811b19c4[.]bin

General

Target
f0044f13be1dcfadb49178b3556d60385b978c84875fa3ab949556e4811b19c4.bin
Size 88KB
Sample260804-spkzfa1tbx
SHA256 f0044f13be1dcfadb49178b3556d60385b978c84875fa3ab949556e4811b19c4
MD5 d28e5a289c90af5240a74ed718bbdba1
SHA1 b3d371eb80dc43c94d8901f26ea8f72f40b304bf
SHA512 b835d3511d01d5adb7c9595cf96d559ae362c10b6b65118ff90c506a2e19909c05ec059063b6cebeaf0f86e6ad2338ac796485a31dc148fc94cdb6e3faeb016e
SSDEEP 1536:h+gisi/OTW1bk3FwErVvHcT3BignpwLsO9NXw6dcz:hIZ1bk1FVvHcTBO4O9fcz
TLSH
T19B936D0594129237E46344F5A6BA4EBDA17C5BE133822DDBC389FC254B35CE279B106F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0044f13be1dcfadb49178b3556d60385b978c84875fa3ab949556e4811b19c4.bin

File Explorer

f0044f13be1dcfadb49178b3556d60385b978c84875fa3ab949556e4811b19c4.bin

.exe 88KB

f0044f13be1dcfadb49178b3556d60385b978c84875fa3ab949556e4811b19c4.bin

IMPHASH 79b96456f9efc94c33ade5e8ec421b2f
SHA256 f0044f13be1dcfadb49178b3556d60385b978c84875fa3ab949556e4811b19c4
MD5 d28e5a289c90af5240a74ed718bbdba1
SHA1 b3d371eb80dc43c94d8901f26ea8f72f40b304bf
SHA512 b835d3511d01d5adb7c9595cf96d559ae362c10b6b65118ff90c506a2e19909c05ec059063b6cebeaf0f86e6ad2338ac796485a31dc148fc94cdb6e3faeb016e
SSDEEP 1536:h+gisi/OTW1bk3FwErVvHcT3BignpwLsO9NXw6dcz:hIZ1bk1FVvHcTBO4O9fcz
TLSH
T19B936D0594129237E46344F5A6BA4EBDA17C5BE133822DDBC389FC254B35CE279B106F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5293

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId CloseHandle CreateFileA GetModuleFileNameA Sleep CreateThread SetLastError GetLastError TerminateProcess OpenProcess ReadFile GetFileSize WriteFile SetFilePointer SetFileAttributesA GetLocalTime ResumeThread SetThreadContext VirtualProtectEx WriteProcessMemory VirtualAllocEx IsBadReadPtr FreeLibrary GetProcAddress LoadLibraryA ReadProcessMemory GetThreadContext CreateProcessA GetCurrentDirectoryA GetWindowsDirectoryA MapViewOfFile OpenFileMappingA GetCommandLineA GetModuleHandleA GetTempFileNameA GetTempPathA DeleteFileA CopyFileA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA GetProcessVersion lstrcmpiA WideCharToMultiByte MultiByteToWideChar

user32

MessageBoxA

msvcrt

memcpy ??3@YAXPAX@Z ftell fclose fread fseek strcpy __CxxFrameHandler _wcsnicmp wcscpy fwrite time memset strcat strlen ??2@YAPAXI@Z _strnicmp fopen wcslen _itoa _wcsicmp

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z ??0_Lockit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

Sharing