02e15079a83aa6d061230a32312fe886303f82730158af3f70f46b4a5a0200fd[.]bin

General

Target
02e15079a83aa6d061230a32312fe886303f82730158af3f70f46b4a5a0200fd.bin
Size 510KB
Sample260815-ebyfqael8v
SHA256 02e15079a83aa6d061230a32312fe886303f82730158af3f70f46b4a5a0200fd
MD5 f451c6b47a0c94e04e26c59ff881ffa4
SHA1 1f9ccb29d07284d52475d318b85f7934be704b59
SHA512 428c0177778c0aed1f94e7d77de470f4bf803df8fc2ab3d45f954db36e9ddf01eb430fe095c7cbbdd98d3feae0101ee5dfe5b447703d1e60057c36a91f4f81ec
SSDEEP 12288:g9p1jvndiePTnLm1Drk9w4pYxXX1NdIn9NRCcd:g9pN1ieLn6GGGYxVaHRCu
TLSH
T1DEB4F1A2FBAD03FCD176C23889960906ABB2B81167555AEF03A045471F333D46E3EF64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e15079a83aa6d061230a32312fe886303f82730158af3f70f46b4a5a0200fd.bin

File Explorer

02e15079a83aa6d061230a32312fe886303f82730158af3f70f46b4a5a0200fd.bin

.exe 510KB

02e15079a83aa6d061230a32312fe886303f82730158af3f70f46b4a5a0200fd.bin

IMPHASH 64e699ae48ab462692be08089cae378f
SHA256 02e15079a83aa6d061230a32312fe886303f82730158af3f70f46b4a5a0200fd
MD5 f451c6b47a0c94e04e26c59ff881ffa4
SHA1 1f9ccb29d07284d52475d318b85f7934be704b59
SHA512 428c0177778c0aed1f94e7d77de470f4bf803df8fc2ab3d45f954db36e9ddf01eb430fe095c7cbbdd98d3feae0101ee5dfe5b447703d1e60057c36a91f4f81ec
SSDEEP 12288:g9p1jvndiePTnLm1Drk9w4pYxXX1NdIn9NRCcd:g9pN1ieLn6GGGYxVaHRCu
TLSH
T1DEB4F1A2FBAD03FCD176C23889960906ABB2B81167555AEF03A045471F333D46E3EF64
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

49104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

opieurst.pdb

kernel32

LoadLibraryA GetProcAddress CreateFileW SetFileTime CloseHandle GetFullPathNameW GetACP GetLogicalDrives GetModuleHandleA GetSystemInfo GetNativeSystemInfo SetLastError GetFileAttributesW GetLogicalDriveStringsW GetTickCount64 GetTickCount GetUserDefaultUILanguage GetUserDefaultLangID QueryPerformanceCounter QueryPerformanceFrequency GetProcessHeap HeapAlloc IsDBCSLeadByte GetCPInfo WaitForSingleObject GetDriveTypeW HeapFree MultiByteToWideChar GetFileInformationByHandle GetFileInformationByHandleEx TryAcquireSRWLockExclusive GetStdHandle GetConsoleMode ReleaseSRWLockExclusive GetCurrentThread GetVersion WriteConsoleW HeapReAlloc SetFileInformationByHandle GetLastError SetFilePointerEx GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW HeapSize FlushFileBuffers GetConsoleOutputCP WriteFile

ntdll

NtWriteFile RtlNtStatusToDosError RtlGetVersion NtReadFile

Sharing