ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282[.]bin[.]zip

General

Target
ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282.bin.zip
Size 5KB
Sample260930-m895sasdkd
SHA256 ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282
MD5 ae4a137eef84b98bc738841d96250d1b
SHA1 c45131c966c8f7780a21c8565a1937568b23d144
SHA512 89e1137f659300df7a556925ff21dc8d32e32ca057692e9da7ecdc8b92205f63667e61653b06226ecf2a81455c55a6d2d6369b6ba088fa33702ee8d677c56642
SSDEEP 96:KtGnx4Rs6Z3f7yWB350za0NcNeuCBB3nqFgREdA9Syq+3cm2ieHaDIWqB/KiTf8F:KtGnx0s6ZT4a0q2B9nqORKqqQYHaDIW/
TLSH
T1DCC17EBD593AB49DF52FA1F24D6E33DC0D141369034D49831C3DAA04BB796E18D05D27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Melting.exe

File Explorer

ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282.bin.zip

.zip 5KB
Melting.exe

.exe 12KB

ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282.bin.zip

SHA256 ebbfe99f9be30859d9948d905222769c8f8d690158e1baaaad14088e39adf282
MD5 ae4a137eef84b98bc738841d96250d1b
SHA1 c45131c966c8f7780a21c8565a1937568b23d144
SHA512 89e1137f659300df7a556925ff21dc8d32e32ca057692e9da7ecdc8b92205f63667e61653b06226ecf2a81455c55a6d2d6369b6ba088fa33702ee8d677c56642
SSDEEP 96:KtGnx4Rs6Z3f7yWB350za0NcNeuCBB3nqFgREdA9Syq+3cm2ieHaDIWqB/KiTf8F:KtGnx0s6ZT4a0q2B9nqORKqqQYHaDIW/
TLSH
T1DCC17EBD593AB49DF52FA1F24D6E33DC0D141369034D49831C3DAA04BB796E18D05D27
MD5 SHA1 SHA512 SSDEEP TLSH

Melting.exe

IMPHASH 5960e4006cf3e48c7ac35cbf00addbb1
SHA256 92a284981c7ca33f1af45ce61738479fbcbb5a4111f5498e2cb54931c8a36c76
MD5 833619a4c9e8c808f092bf477af62618
SHA1 b4a0efa26f790e991cb17542c8e6aeb5030d1ebf
SHA512 4f231fc16339d568b5cf9353133aeae835eb262dab68bc80d92f37b43df64dce4fae0e913cbaa3bb61351a759aeecf9d280bc5779b0853c980559a654d6cca11
SSDEEP 192:0TVtyoHzIj5dzyKa7gyh5QzpMm74ysT55tfoUK:utpTIj5dO52/HsTu
TLSH
T128423C07BB5305EDDA27C1F5D0730E06E5BA75204722768F87B162A21E93242B9A76CD
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5636

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Domas\Desktop\ScreenMelter\x64\Release\ScreenMelter.pdb

kernel32

IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent GetStartupInfoW GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetModuleHandleW TerminateProcess GetTickCount

user32

RegisterClassW PeekMessageW SetTimer ValidateRect PostQuitMessage ReleaseDC DispatchMessageW ShowWindow GetSystemMetrics GetDC TranslateMessage LoadCursorW KillTimer CreateWindowExA DefWindowProcW

gdi32

BitBlt

vcruntime140

memset __C_specific_handler

api-ms-win-crt-utility-l1-1-0

srand rand

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _initialize_onexit_table _c_exit _initterm _get_narrow_winmain_command_line _register_onexit_function _initialize_narrow_environment _initterm_e _configure_narrow_argv _set_app_type _seh_filter_exe _register_thread_local_exe_atexit_callback _cexit exit terminate _exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing