8d5d913136a711be[.]bin[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
8d5d913136a711be.bin.exe
Size 3.6MB
Sample261003-strmsasv2m
SHA256 8d5d913136a711beb8d1053c63615027925a7726dc030c16eff8e9056ca0f00f
MD5 a80e70c82d4d0a0cbe57f1d8c9272fbc
SHA1 285129c00b3d9e7fcebdae7bf2e0f21e27f213e1
SHA512 cf08fc361e9f2ed6b53eb43babc999558acb3e2c1e177eb1496deab8afc61f8e7b97bb3373b8db21c908f11cd586558796764b7b619db4ef2a86f01859170b09
SSDEEP 98304:WN4Dd5s9XBE52PboeSRRROgfbBp+4H/TYrmjCe1WbboM:44Dd5s4scVnjorMClb9
TLSH
T129062354FA8390F1ED539CB1101FFBBF8A35A424906ECEB6DBD66B41F876831550CA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d5d913136a711be.bin.exe

File Explorer

8d5d913136a711be.bin.exe

.exe 3.6MB

8d5d913136a711be.bin.exe

IMPHASH 8d0f2bcb8668e37f21fc8649550fb25d
SHA256 8d5d913136a711beb8d1053c63615027925a7726dc030c16eff8e9056ca0f00f
MD5 a80e70c82d4d0a0cbe57f1d8c9272fbc
SHA1 285129c00b3d9e7fcebdae7bf2e0f21e27f213e1
SHA512 cf08fc361e9f2ed6b53eb43babc999558acb3e2c1e177eb1496deab8afc61f8e7b97bb3373b8db21c908f11cd586558796764b7b619db4ef2a86f01859170b09
SSDEEP 98304:WN4Dd5s9XBE52PboeSRRROgfbBp+4H/TYrmjCe1WbboM:44Dd5s4scVnjorMClb9
TLSH
T129062354FA8390F1ED539CB1101FFBBF8A35A424906ECEB6DBD66B41F876831550CA0A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

user32

GetDesktopWindow LoadIconW CreateWindowExW RegisterClassExW GetMessageW MessageBoxW DrawTextW UnregisterClassW GetDC DefWindowProcW GetSystemMetrics TranslateMessage GetWindowTextW LoadCursorW UpdateWindow PeekMessageW PostQuitMessage DispatchMessageW DestroyWindow GetClientRect ReleaseDC ShowWindow FillRect BeginPaint GetForegroundWindow IsWindow InvalidateRect SetWindowTextW EndPaint

ole32

CoUninitialize OleInitialize OleUninitialize CoInitializeEx

comdlg32

ChooseColorW

comctl32

InitCommonControlsEx

kernel32

GetCurrentThreadId CloseHandle GetModuleHandleW GetModuleFileNameW GetTickCount QueryPerformanceCounter EnterCriticalSection LocalFree DeleteCriticalSection FreeConsole RaiseException InitializeCriticalSection SetProcessAffinityMask GetConsoleMode DuplicateHandle GetCurrentProcess GetProcessAffinityMask SetStdHandle QueryPerformanceFrequency WaitForSingleObject AddAtomA LoadLibraryA GetEnvironmentVariableW IsDBCSLeadByteEx CreateSemaphoreA Sleep TlsSetValue MultiByteToWideChar TryEnterCriticalSection GetProcessHeap SetThreadPriority LeaveCriticalSection Sleep MulDiv CreateMutexA HeapReAlloc CreateEventA SetEvent LoadLibraryW SetLastError SetEnvironmentVariableA SetUnhandledExceptionFilter GetHandleInformation ResetEvent GetConsoleWindow GetWindowsDirectoryW ReleaseMutex GetStartupInfoA GetCurrentProcessId HeapFree TerminateProcess GetOEMCP CreateEventW OutputDebugStringA GetCurrentThread DeleteAtom ExpandEnvironmentStringsW WideCharToMultiByte GetModuleHandleA WaitForMultipleObjects GetThreadPriority WaitForSingleObject ReleaseSemaphore TlsGetValue VirtualQuery SetErrorMode GetStartupInfoA SetLastError GetAtomNameA FormatMessageA FindAtomA GetSystemTimeAsFileTime GetCommandLineW GetLastError HeapAlloc GetProcAddress

msvcrt

strcmp _amsg_exit __mb_cur_max exit __lconv_init memchr atoi _errno __p__commode _endthreadex _beginthreadex _initterm __set_app_type free _cexit realloc fputc memcmp longjmp memset _strdup fputs malloc localeconv _ultoa fprintf __p__acmdln memmove strchr vfprintf memcpy setlocale _write __getmainargs _onexit __setusermatherr _memccpy printf signal abort _close strlen wcslen strerror __p__fmode strncmp __initenv _iob _setjmp3 _read calloc fwrite

gdi32

GetStockObject SetBkMode TextOutW SelectObject

Name

.text

Size

230KB

Virtual Size

229KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.sxdata

Size

Virtual Size

8.4MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8d5d913136a711be.bin.exe

user32

ole32

comdlg32

comctl32

kernel32

msvcrt

gdi32

generic