84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad[.]bin

General

Target
84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad.bin
Size 217KB
Sample261002-e399lavv6k
SHA256 84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad
MD5 f6f7a2f76f6f011ad4907dee787e066e
SHA1 ab5938fa79fe4e8b131f1f0a4bcfa9d3605d35bf
SHA512 e6aacca01b9c6d7b88a0090a84af0af006553af5dd25bb66e06d1fd5067eef345841316a45763d954162e06a5dcefe7b7e94fd1b764d02e3452493e13f73899d
SSDEEP 3072:jqiNUbimV1dfsy4LNyAJTdMyAAdTSYkeyvJCZ2xWHnAsMW5vuXbFt3:zGmU1dkywNyCxMrGTSY/CGEWAXbP3
TLSH
T1FE246D09BBA549FDF5A7D139C9521A02E6767C050370DBDF07A04A239F637E0AE39B20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad.bin

File Explorer

84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad.bin

.exe 217KB

84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad.bin

IMPHASH 511212ae3bebdfea55c0b83c6d673f5e
SHA256 84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad
MD5 f6f7a2f76f6f011ad4907dee787e066e
SHA1 ab5938fa79fe4e8b131f1f0a4bcfa9d3605d35bf
SHA512 e6aacca01b9c6d7b88a0090a84af0af006553af5dd25bb66e06d1fd5067eef345841316a45763d954162e06a5dcefe7b7e94fd1b764d02e3452493e13f73899d
SSDEEP 3072:jqiNUbimV1dfsy4LNyAJTdMyAAdTSYkeyvJCZ2xWHnAsMW5vuXbFt3:zGmU1dkywNyCxMrGTSY/CGEWAXbP3
TLSH
T1FE246D09BBA549FDF5A7D139C9521A02E6767C050370DBDF07A04A239F637E0AE39B20
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

53424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetLastError LoadLibraryW HeapAlloc GetProcAddress FormatMessageW GetComputerNameW GetProcessHeap CopyFileW FindClose GetModuleFileNameW LocalFree HeapFree WriteConsoleW CreateFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW CloseHandle DuplicateHandle CreateProcessW GetStdHandle WriteFile GetFileSizeEx SetFilePointerEx GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW ReadFile GetFileAttributesExW CreatePipe ReadConsoleW HeapReAlloc FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle HeapSize

advapi32

GetUserNameW

iphlpapi

GetIpAddrTable

ws2_32

inet_ntoa

Name

.text

Size

146KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

84366a894120d4a8c83411925ef04de52fa56da6fad0023a71f71a9bf21259ad.bin

kernel32

advapi32

iphlpapi

ws2_32

generic