d6f8af6888df0d64f4b1ca91d3c3bdc7cdd20e046101bec755ca1bd93b30b0e1[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
d6f8af6888df0d64f4b1ca91d3c3bdc7cdd20e046101bec755ca1bd93b30b0e1.bin
Size 82.8MB
Sample261018-3dhp2sby21
SHA256 d6f8af6888df0d64f4b1ca91d3c3bdc7cdd20e046101bec755ca1bd93b30b0e1
MD5 4216724e48ef4c93862f446c54104df6
SHA1 25cdbc20b292f75141718399beca72180321da03
SHA512 51e2958a508c78ac10cec163d2da48ed085632e9ed0e626c02bf84f60385fa67523e3c595439a19febb00524ebd83e1fcbc9a3e363de982429708841848c4f1b
SSDEEP 1572864:0kMn1iUyvP5Ld/6vkJy1OUPhinlXx/LAEINDEHs20w6gXn5qppcIOP/d:0fuQGzGo0tgXsoB3d
TLSH
T13118F111A65E859CD05AE034824786239BF13C8E0B35EEEF25D45E3B2F6B7E06B38715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f8af6888df0d64f4b1ca91d3c3bdc7cdd20e046101bec755ca1bd93b30b0e1.bin

File Explorer

d6f8af6888df0d64f4b1ca91d3c3bdc7cdd20e046101bec755ca1bd93b30b0e1.bin

.exe 82.8MB
ArgoCheatBSRegionFREE.pyc

8KB

d6f8af6888df0d64f4b1ca91d3c3bdc7cdd20e046101bec755ca1bd93b30b0e1.bin

IMPHASH fec9ae45c44bfde87a5e2f0519f746d5
SHA256 d6f8af6888df0d64f4b1ca91d3c3bdc7cdd20e046101bec755ca1bd93b30b0e1
MD5 4216724e48ef4c93862f446c54104df6
SHA1 25cdbc20b292f75141718399beca72180321da03
SHA512 51e2958a508c78ac10cec163d2da48ed085632e9ed0e626c02bf84f60385fa67523e3c595439a19febb00524ebd83e1fcbc9a3e363de982429708841848c4f1b
SSDEEP 1572864:0kMn1iUyvP5Ld/6vkJy1OUPhinlXx/LAEINDEHs20w6gXn5qppcIOP/d:0fuQGzGo0tgXsoB3d
TLSH
T13118F111A65E859CD05AE034824786239BF13C8E0B35EEEF25D45E3B2F6B7E06B38715
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6150224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

argo_launcher.pdb

bcryptprimitives

ProcessPrng

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW RegGetValueW EventUnregister EventWriteTransfer EventRegister EventSetInformation

ntdll

RtlNtStatusToDosError NtReadFile NtOpenFile NtWriteFile NtCreateNamedPipeFile RtlGetVersion

kernel32

LoadLibraryW InitializeSListHead lstrlenW FindNextFileW QueryPerformanceFrequency GetSystemTimeAsFileTime SleepConditionVariableSRW GetFullPathNameW WakeAllConditionVariable GetTempPathW WaitForMultipleObjects IsThreadAFiber SetUnhandledExceptionFilter GetModuleHandleExW FlsAlloc FlsFree SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LoadLibraryA RtlPcToFileHeader RaiseException SetEnvironmentVariableW DeviceIoControl GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW FlsGetValue GetCommandLineW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler AcquireSRWLockExclusive CreateDirectoryW GetExitCodeProcess GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx SetFileTime CancelIo GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetOverlappedResult ReadFile WriteFileEx SleepEx ReleaseSRWLockExclusive GetUserDefaultUILanguage ReadFileEx GetCurrentProcessId GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW RtlUnwindEx GetModuleHandleW FreeLibrary CreateEventW CreateThread QueryPerformanceCounter LCIDToLocaleName HeapReAlloc DuplicateHandle GetCurrentProcess GetStdHandle SetFileInformationByHandle SetLastError WaitForSingleObject FreeEnvironmentStringsW CompareStringOrdinal GetEnvironmentVariableW CreateFileW GetModuleHandleA Sleep GetProcAddress CloseHandle GetCurrentThreadId InitializeCriticalSectionEx DeleteCriticalSection EncodePointer GetConsoleMode GetFileInformationByHandle LoadLibraryExA HeapAlloc FlsSetValue FormatMessageW

user32

PostQuitMessage DestroyMenu RemoveMenu AppendMenuW InsertMenuW SetMenu TrackPopupMenu DrawIconEx GetMenuBarInfo CheckMenuItem SetMenuItemInfoW CreateAcceleratorTableW DestroyAcceleratorTable DrawMenuBar GetMenuItemInfoW CreatePopupMenu CreateMenu CreateIcon DestroyWindow RegisterClassExW SetWindowPos ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyState GetAsyncKeyState GetKeyboardState GetRawInputData SystemParametersInfoA SetPropW GetMessageA TranslateMessage SetWindowLongW EnableMenuItem GetSystemMenu GetMenu ShowCursor ClipCursor OffsetRect IsWindowVisible SendInput SetForegroundWindow EnumDisplayMonitors DispatchMessageA SetWindowTextW EnumChildWindows GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity GetMessageW DestroyIcon ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx GetWindowDC RegisterRawInputDevices RegisterWindowMessageA GetWindow SetParent MapWindowPoints SetFocus ShowWindow DispatchMessageW FlashWindowEx DrawTextW PostMessageW EnableWindow MapVirtualKeyW IsWindowEnabled ReleaseDC GetDC VkKeyScanW PostThreadMessageW RedrawWindow IsProcessDPIAware RegisterTouchWindow GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn DefWindowProcW GetSystemMetrics IsWindow CreateWindowExW ChangeDisplaySettingsExW AdjustWindowRectEx GetClipCursor GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos PeekMessageW CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW FillRect GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos ClientToScreen GetClientRect GetWindowLongW ScreenToClient GetUpdateRect ValidateRect IsIconic SendMessageW AdjustWindowRect TranslateAcceleratorW SetCursor LoadCursorW InvalidateRgn GetWindowPlacement SetWindowPlacement MonitorFromPoint

gdi32

CreateSolidBrush SelectObject CreateDIBSection SetBkMode GetDeviceCaps BitBlt SetTextColor CombineRgn CreateRectRgn CreateCompatibleDC DeleteDC DeleteObject

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

ole32

RevokeDragDrop CoCreateFreeThreadedMarshaler OleInitialize CoUninitialize CoTaskMemAlloc CoTaskMemFree CoInitialize CoCreateInstance CoInitializeEx RegisterDragDrop

shlwapi

SHCreateMemStream

comctl32

RemoveWindowSubclass DefSubclassProc SetWindowSubclass TaskDialogIndirect

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

shell32

SHOpenFolderAndSelectItems ShellExecuteExW SHGetKnownFolderPath ShellExecuteW ILCreateFromPathW ILFree DragQueryFileW DragFinish SHAppBarMessage

oleaut32

SetErrorInfo SysStringLen SysFreeString GetErrorInfo

api-ms-win-crt-math-l1-1-0

pow trunc __setusermatherr round floor roundf

api-ms-win-crt-string-l1-1-0

strcpy_s wcslen _wcsicmp wcscmp

api-ms-win-crt-convert-l1-1-0

_wtoi _ultow_s wcstol

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _cexit _set_app_type _c_exit __p___argc _configure_narrow_argv _register_thread_local_exe_atexit_callback exit _seh_filter_exe _initterm _initterm_e _exit __p___argv terminate _initialize_narrow_environment abort _crt_atexit _register_onexit_function _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free calloc _callnewh