SecuriteInfo[.]com[.]Variant[.]Babar[.]125059[.]9342[.]24780[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Babar.125059.9342.24780.exe
Size

42KB
MD5

ba708c9eaf47bd437f83757e180b4b67
SHA1

697f7cf01580d208dedac1113900f0f028d8dce1
SHA256

45fdeba57d865c4027de228cb3881aa22a4335455d30d685f9759c2a06d331f6
SHA512

b53e489f0a8fdf0f498028958217fd0440fce9ff0c8142ccd4b021b18f8f0b4fefdc3e45ae5553790b0c2a4ea887012d87eb09d22707a5f840eaecccf1161f03
SSDEEP

768:Yv4NY+HKdSf/2jX8i3SJPwktx8VStWHJduTJaspNaPqAgTNAUaUJSje:YvMYzkVmYwytWpctlpXaa

Score

N/A

Malware Config

Signatures

Files

SecuriteInfo.com.Variant.Babar.125059.9342.24780.exe
.exe windows x86

d31adcc7c291236a5f034d1b58ef3319

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
memmove
memcpy
_exit
_XcptFilter
exit
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
memset

comctl32

ord17
CreateStatusWindowW
CreateToolbarEx

kernel32

VirtualAlloc
EnumLanguageGroupLocalesW
GetModuleHandleW
ReadFile
GetFileSize
GetStartupInfoW
GlobalUnlock
lstrcpyW
GlobalLock
GlobalAlloc
lstrlenW
HeapFree
HeapAlloc
GetProcessHeap
lstrcmpW
LocalFree
FormatMessageW
GetLastError
CloseHandle
WriteFile
WideCharToMultiByte
CreateFileW
GetCurrentDirectoryW
MultiByteToWideChar
CreateProcessW
lstrcatW
GetWindowsDirectoryW

wininet

CreateUrlCacheGroup
InternetAttemptConnect
InternetConfirmZoneCrossing
InternetSetDialState
FtpSetCurrentDirectoryA
InternetCrackUrlA
FtpSetCurrentDirectoryW
GetUrlCacheEntryInfoExA
FtpGetCurrentDirectoryW
GetUrlCacheEntryInfoA
FindNextUrlCacheEntryExA

odbc32

ord207
ord167
ord70
ord265
ord52
ord260

rpcrt4

MesEncodeFixedBufferHandleCreate
NdrRpcSsDisableAllocate
RpcAsyncInitializeHandle
RpcServerUseProtseqIfExA
UuidCreateNil
RpcBindingInqAuthInfoExA
UuidFromStringA
NdrNsSendReceive

msi

ord85
ord151
ord29
ord167
ord135
ord78
ord145
ord49
ord33

rtutils

RouterLogEventDataA
RouterLogEventStringW
TracePrintfA
RouterLogEventStringA
LogErrorW

user32

LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
PostQuitMessage
GetCursorPos
CheckDlgButton
IsDlgButtonChecked
EndDialog
GetWindowTextW
GetWindowTextLengthW
GetDlgItem
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SendMessageW
wsprintfW
GetClientRect
IsWindowVisible
MoveWindow
EnableMenuItem
GetMenu
LoadStringW
UpdateWindow
ShowWindow
CreateWindowExW
ReleaseDC
InvertRect
GetDC
SetWindowTextW
DialogBoxParamW
DefWindowProcW
RegisterClassW
LoadCursorW
MessageBoxW
CheckMenuItem
DestroyWindow
SetFocus
SetCapture
ReleaseCapture
GetCapture
SetCursor
ScreenToClient

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueW
RegEnumKeyW
RegGetValueW
RegCreateKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyW
RegEnumValueW

shell32

ShellAboutW

ole32

OleUninitialize
OleInitialize
CLSIDFromString

oleaut32

VariantInit
SysStringLen
LoadTypeLi
SysFreeString
VariantChangeType

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d31adcc7c291236a5f034d1b58ef3319

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

comctl32

kernel32

wininet

odbc32

rpcrt4

msi

rtutils

user32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 2KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 2KB