srb2xm96[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
srb2xm96.exe
Size 3.3MB
Sample261002-p7s6zsysg1
SHA256 6300794d498b87d4be3595d847704559cfa94dc6f1c898da565405c2e24c4c7e
MD5 ee83219de0b1e38b7baae729e83f2faf
SHA1 8154f87075b4fc64db2a5703725b7a7d38709fac
SHA512 0d7415a21c82b8d61a156d4b658d620011842baead49e14a2a5e472ba785accd0202ee60a587a5ac79bdadf23174dfefebfac8e773c5489178d687437c379cad
SSDEEP 98304:e1pSQlJJkIjR4hkpivR5b9nygWtI8IPD4HqPxtr+xw:eq6JeIRwPRnSw4HY3rEw
TLSH
T119F53386E7C901B7FE229CB12548E5536236687731A6C91A17CF704F17B7BB98EF0A04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
srb2xm96.exe

File Explorer

srb2xm96.exe

.exe 3.3MB

srb2xm96.exe

IMPHASH 5cb773d722840e0e6b67816c712236f1
SHA256 6300794d498b87d4be3595d847704559cfa94dc6f1c898da565405c2e24c4c7e
MD5 ee83219de0b1e38b7baae729e83f2faf
SHA1 8154f87075b4fc64db2a5703725b7a7d38709fac
SHA512 0d7415a21c82b8d61a156d4b658d620011842baead49e14a2a5e472ba785accd0202ee60a587a5ac79bdadf23174dfefebfac8e773c5489178d687437c379cad
SSDEEP 98304:e1pSQlJJkIjR4hkpivR5b9nygWtI8IPD4HqPxtr+xw:eq6JeIRwPRnSw4HY3rEw
TLSH
T119F53386E7C901B7FE229CB12548E5536236687731A6C91A17CF704F17B7BB98EF0A04
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14277

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteA FindExecutableA

user32

ShowWindow DefWindowProcA BeginPaint GetSysColor GetClientRect SetRect EndPaint SetWindowWord GetWindowWord RegisterClassA OemToCharA CharToOemA OemToCharBuffA LoadCursorA DestroyWindow SetWindowTextA SendMessageA EnableWindow PostMessageA GetLastActivePopup SetWindowPos CharNextA SetTimer KillTimer DialogBoxIndirectParamA GetWindowRect GetSystemMetrics GetKeyState PeekMessageA TranslateMessage DispatchMessageA GetParent SetDlgItemTextA SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow wsprintfA MessageBoxA SetCursor GetDlgItemTextA EndDialog

kernel32

CreateDirectoryA _lclose _lopen GlobalHandle RtlUnwind lstrcmpA GetCommandLineA GetModuleHandleA ExitProcess SetErrorMode GetVersion LoadLibraryA GetProcAddress GetModuleFileNameA FreeLibrary lstrcmpiA GetWindowsDirectoryA GetEnvironmentVariableA LocalAlloc LocalFree GlobalUnlock lstrcpyA GlobalFree GlobalAlloc GlobalLock WinExec _llseek GetDriveTypeA _lread _lwrite GetVolumeInformationA FindClose FindFirstFileA GetCurrentDirectoryA SetCurrentDirectoryA lstrlenA lstrcatA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime _lcreat

gdi32

SetTextColor SetTextAlign GetTextExtentPoint32A GetBkColor DeleteObject SetBkColor ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject

advapi32

RegQueryValueA

Name

.text

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

146B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

srb2xm96.exe

shell32

user32

kernel32

gdi32

advapi32

generic