ba56e67cda1b2dae602ff5bfe16f8982[.]exe

General

Target
ba56e67cda1b2dae602ff5bfe16f8982.exe
Size 321KB
Sample230327-mes96sfa5w
SHA256 fa0854b2e8a021f34477236f87fd599e00ec663f0f532a5af2eb76d2b0d4fb7d
MD5 ba56e67cda1b2dae602ff5bfe16f8982
SHA1 aea4eaea84436be70221e3ee5ddf0645be576be7
SHA512 1cea00eb079bb26057535c8a7a9be2c646b8461b03d3dd1002a9b35d91dc75384506fc6333b7a45c24a305239c74aa0f923185e89664865d7a909a826ad96192
SSDEEP 6144:MKYdkCLRTqU+f2VI81e/UP+AvR/aOISUEHk7vhsg:KdkCVTqU+foIHcGS9aJEE
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ba56e67cda1b2dae602ff5bfe16f8982.exe

.exe 321KB

ba56e67cda1b2dae602ff5bfe16f8982.exe

IMPHASH 21829bcb83e2224c2104cf7cefe96c53
SHA256 fa0854b2e8a021f34477236f87fd599e00ec663f0f532a5af2eb76d2b0d4fb7d
MD5 ba56e67cda1b2dae602ff5bfe16f8982
SHA1 aea4eaea84436be70221e3ee5ddf0645be576be7
SHA512 1cea00eb079bb26057535c8a7a9be2c646b8461b03d3dd1002a9b35d91dc75384506fc6333b7a45c24a305239c74aa0f923185e89664865d7a909a826ad96192
SSDEEP 6144:MKYdkCLRTqU+f2VI81e/UP+AvR/aOISUEHk7vhsg:KdkCVTqU+foIHcGS9aJEE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34174

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalSize SetDefaultCommConfigW CreateHardLinkA WaitForSingleObjectEx FreeEnvironmentStringsA EnumCalendarInfoExW GetConsoleTitleA ReadConsoleW GetCompressedFileSizeW WaitNamedPipeW CreateActCtxW SetHandleCount TlsSetValue LoadLibraryW GetConsoleMode InterlockedPopEntrySList FindNextVolumeW GetFileAttributesW WriteConsoleW IsBadStringPtrA WritePrivateProfileStringW GetStringTypeExA GetConsoleAliasesW GetCommState ChangeTimerQueueTimer SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW CreateMemoryResourceNotification SearchPathA LoadLibraryA LocalAlloc DnsHostnameToComputerNameA AddAtomW GetProfileStringA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA GetCommTimeouts QueryPerformanceFrequency DeleteFileW DebugBreak ReadConsoleOutputCharacterW GetConsoleAliasExesLengthA FindResourceExW GetNumaProcessorNode VirtualQuery GetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharABCWidthsW CreateDiscardableBitmap GetCharWidthI

advapi32

GetEventLogInformation

Sharing