BallinHoop-PARK[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

BallinHoop-PARK.exe
Size

28.9MB
MD5

4a0aa75fdefd353f53894f4a00a8e974
SHA1

ebae2b5bf6259fbec5cc8dc00a143b844e529c09
SHA256

ceebabc743e4c111da717402052cb68068ebaa0c2b2061b39b74eb6b35771687
SHA512

d30f674fde4c2e825bda2208b4f0a0895fe101066669f2603715fc5f37347afcaeb1d98996f3274e0065d5565d11eee77bfc439f8d33d0d75b4305fe2af34e85
SSDEEP

786432:8Uya1PJoQKTrTT2+7BdWr1C3kPrR7+2DBjVy5lNpMCFaQLp3fNE:zyWPJb8TT2IB2hR7+EjIMCFVfNE

Score

1^/10

Malware Config

Signatures

Files

BallinHoop-PARK.exe
.exe windows x86

66f636fe2ee73380d21304c6a91abc8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
RaiseException

ole32

OleUninitialize

user32

PostMessageA
AppendMenuA

atl

ord47

shell32

DragQueryFileA
ShellExecuteA

gdi32

GetDeviceCaps
LineTo

advapi32

ControlService
RegQueryValueExA

winspool.drv

ClosePrinter
DocumentPropertiesA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

oleaut32

SafeArrayUnaccessData
LoadTypeLi

shlwapi

PathFileExistsA

winmm

waveOutGetNumDevs

ws2_32

inet_addr

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 13.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 728KB - Virtual size: 726KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

66f636fe2ee73380d21304c6a91abc8a

Headers

File Characteristics

Imports

kernel32

ole32

user32

atl

shell32

gdi32

advapi32

winspool.drv

comctl32

oledlg

oleaut32

shlwapi

winmm

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.3MB

.rdata Size: - Virtual size: 2.2MB

.data Size: - Virtual size: 467KB

.rsrc Size: 248KB - Virtual size: 244KB

.svmp1 Size: - Virtual size: 13.3MB

.svmp2 Size: 14.3MB - Virtual size: 14.3MB

.svmp3 Size: 4.6MB - Virtual size: 4.6MB

.svmp4 Size: 9.0MB - Virtual size: 9.0MB

.svmp5 Size: 12KB - Virtual size: 11KB

.svmp6 Size: 728KB - Virtual size: 726KB

.text
Size: - Virtual size: 1.3MB

.rdata
Size: - Virtual size: 2.2MB

.data
Size: - Virtual size: 467KB

.rsrc
Size: 248KB - Virtual size: 244KB

.svmp1
Size: - Virtual size: 13.3MB

.svmp2
Size: 14.3MB - Virtual size: 14.3MB

.svmp3
Size: 4.6MB - Virtual size: 4.6MB

.svmp4
Size: 9.0MB - Virtual size: 9.0MB

.svmp5
Size: 12KB - Virtual size: 11KB

.svmp6
Size: 728KB - Virtual size: 726KB