af899c555ddd9b816897a690bc42c26fbc8a7e6d1762ee49ffe13684ed2cfcdc[.]bin

General

Target
af899c555ddd9b816897a690bc42c26fbc8a7e6d1762ee49ffe13684ed2cfcdc.bin
Size 105KB
Sample260805-qh5ddsbb42
SHA256 af899c555ddd9b816897a690bc42c26fbc8a7e6d1762ee49ffe13684ed2cfcdc
MD5 50ea3016bfc80550715bc9287769b813
SHA1 fc00d9123c8d59f1fb1f30d21897498a5c79672f
SHA512 1ff660b4c6cecf1bb4bee8c5ec0989d14a531c7cf4c18f0f8e0b32332a77c09ad5d403c9b0d9f339a0af67739f6b5966f28f81afc6144b8f5b92a3a27f1a0be6
SSDEEP 1536:M+gisi/OTW1bk3FwErVvHcT1xBignpwLsO9NXw6dcZJX:MIZ1bk1FVvHcT1nO4O9fcZZ
TLSH
T196B30902AE2252A2E86244F15F654B78562C4FD233471EF7934BF865CB35CE27CB129E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af899c555ddd9b816897a690bc42c26fbc8a7e6d1762ee49ffe13684ed2cfcdc.bin

File Explorer

af899c555ddd9b816897a690bc42c26fbc8a7e6d1762ee49ffe13684ed2cfcdc.bin

.exe 105KB

af899c555ddd9b816897a690bc42c26fbc8a7e6d1762ee49ffe13684ed2cfcdc.bin

IMPHASH 79b96456f9efc94c33ade5e8ec421b2f
SHA256 af899c555ddd9b816897a690bc42c26fbc8a7e6d1762ee49ffe13684ed2cfcdc
MD5 50ea3016bfc80550715bc9287769b813
SHA1 fc00d9123c8d59f1fb1f30d21897498a5c79672f
SHA512 1ff660b4c6cecf1bb4bee8c5ec0989d14a531c7cf4c18f0f8e0b32332a77c09ad5d403c9b0d9f339a0af67739f6b5966f28f81afc6144b8f5b92a3a27f1a0be6
SSDEEP 1536:M+gisi/OTW1bk3FwErVvHcT1xBignpwLsO9NXw6dcZJX:MIZ1bk1FVvHcT1nO4O9fcZZ
TLSH
T196B30902AE2252A2E86244F15F654B78562C4FD233471EF7934BF865CB35CE27CB129E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5293

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId CloseHandle CreateFileA GetModuleFileNameA Sleep CreateThread SetLastError GetLastError TerminateProcess OpenProcess ReadFile GetFileSize WriteFile SetFilePointer SetFileAttributesA GetLocalTime ResumeThread SetThreadContext VirtualProtectEx WriteProcessMemory VirtualAllocEx IsBadReadPtr FreeLibrary GetProcAddress LoadLibraryA ReadProcessMemory GetThreadContext CreateProcessA GetCurrentDirectoryA GetWindowsDirectoryA MapViewOfFile OpenFileMappingA GetCommandLineA GetModuleHandleA GetTempFileNameA GetTempPathA DeleteFileA CopyFileA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA GetProcessVersion lstrcmpiA WideCharToMultiByte MultiByteToWideChar

user32

MessageBoxA

msvcrt

memcpy ??3@YAXPAX@Z ftell fclose fread fseek strcpy __CxxFrameHandler _wcsnicmp wcscpy fwrite time memset strcat strlen ??2@YAPAXI@Z _strnicmp fopen wcslen _itoa _wcsicmp

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z ??0_Lockit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

Sharing