ba088732d44be132a71090b44a92a184[.]exe

General

Target
ba088732d44be132a71090b44a92a184.exe
Size 315KB
Sample230403-pt342agc8w
SHA256 481920cc54ecf2c808fbf29cff0376e792afe6b10bb44737ff4b782b4e735db7
MD5 ba088732d44be132a71090b44a92a184
SHA1 138578e60c5239c5ce779b65638705f9c85aa18b
SHA512 379c0df35300287c4da34257dfb7bc90e855663a4a0a9d84f7de16fb712b184025df1bb0d8bd5edf9a7eb4aa2704f086a34acf1faafd4914f0055a034762448d
SSDEEP 6144:gwQb1gglc7q4S84O31Hy41FhgmY5Ztkjt:gw41flcFS84Y1Hz1wmY5Gt
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ba088732d44be132a71090b44a92a184.exe

.exe 315KB

ba088732d44be132a71090b44a92a184.exe

IMPHASH 5859c059bd1a01b909084ca1cc7531a9
SHA256 481920cc54ecf2c808fbf29cff0376e792afe6b10bb44737ff4b782b4e735db7
MD5 ba088732d44be132a71090b44a92a184
SHA1 138578e60c5239c5ce779b65638705f9c85aa18b
SHA512 379c0df35300287c4da34257dfb7bc90e855663a4a0a9d84f7de16fb712b184025df1bb0d8bd5edf9a7eb4aa2704f086a34acf1faafd4914f0055a034762448d
SSDEEP 6144:gwQb1gglc7q4S84O31Hy41FhgmY5Ztkjt:gw41flcFS84Y1Hz1wmY5Gt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15927

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW CopyFileExW GetModuleHandleExA GetStringTypeA SetLocalTime CallNamedPipeA EnumCalendarInfoW GetEnvironmentStringsW InterlockedCompareExchange WriteConsoleInputA GetCommProperties BackupSeek GetModuleHandleW SetFileTime GetWindowsDirectoryA WaitNamedPipeW GetDateFormatA EnumResourceTypesA GetDriveTypeA GetSystemDirectoryW GlobalFindAtomA ReadFileScatter GetVersionExW GetFileAttributesA DnsHostnameToComputerNameW GetComputerNameExA GetConsoleAliasW SetLocaleInfoA lstrcmpW DeactivateActCtx GetConsoleOutputCP GetProcAddress RemoveDirectoryA ResetEvent LoadLibraryA OpenMutexA LocalAlloc SetCalendarInfoW GetFileType BuildCommDCBAndTimeoutsW GlobalFindAtomW GetModuleFileNameA FindFirstVolumeMountPointA GetModuleHandleA ContinueDebugEvent CreateMutexA FindNextFileW RequestWakeupLatency GetCurrentThreadId DeleteFileW FindActCtxSectionStringW FindNextVolumeA EnumSystemLocalesA GetLocaleInfoA GetTapePosition CreateTimerQueue GetLastError DeleteFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryW GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

GetMenu

advapi32

ReportEventA

Sharing