BallinHoop-AutoGreener[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

BallinHoop-AutoGreener.exe
Size

30.2MB
MD5

7b11bb4c76ecca0e0f7766c1f98adad6
SHA1

eb6d2191a7ff67bda11571803ea0baa11c7003df
SHA256

d8cb250c1facee024e5e2b569a8c408efe314dbd79c49dc3a02bc94c12d8eb4e
SHA512

d5d6cf25967e31de126cee19e6fd0296ca2e442499b47502ab43c5c7814e7304c7c00ad97d6fec67e580afb919379229d2be2cb36c3bf0f01a4f360bb3b74d20
SSDEEP

786432:KgzM6WPcRY3YyM89NCPRPIL47x1zcrEmVx+v4n:/M7Pc5J8DCPact1mZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BallinHoop-AutoGreener.exe

Files

BallinHoop-AutoGreener.exe
.exe windows:4 windows x86

946e0a1d33d96f8522fb8a022cfd05c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
lstrcmpA

ole32

OleIsCurrentClipboard

user32

GetLastActivePopup
DefWindowProcW

atl

ord47

shell32

DragQueryFileA
Shell_NotifyIconA

gdi32

RectVisible
CreateBrushIndirect

advapi32

DeleteService
RegCloseKey

winspool.drv

ClosePrinter
OpenPrinterA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

oleaut32

SafeArrayCreate
SysAllocStringByteLen

shlwapi

PathFileExistsA

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

winmm

waveOutWrite

ws2_32

inet_addr

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 13.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 14.2MB - Virtual size: 14.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 11.0MB - Virtual size: 11.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

946e0a1d33d96f8522fb8a022cfd05c6

Headers

File Characteristics

Imports

kernel32

ole32

user32

atl

shell32

gdi32

advapi32

winspool.drv

comctl32

oledlg

oleaut32

shlwapi

msvfw32

avifil32

winmm

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 1.2MB

.data Size: - Virtual size: 489KB

.rsrc Size: 252KB - Virtual size: 251KB

.svmp1 Size: - Virtual size: 13.5MB

.svmp2 Size: 14.2MB - Virtual size: 14.2MB

.svmp3 Size: 4.7MB - Virtual size: 4.7MB

.svmp4 Size: 11.0MB - Virtual size: 11.0MB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 1.2MB

.data
Size: - Virtual size: 489KB

.rsrc
Size: 252KB - Virtual size: 251KB

.svmp1
Size: - Virtual size: 13.5MB

.svmp2
Size: 14.2MB - Virtual size: 14.2MB

.svmp3
Size: 4.7MB - Virtual size: 4.7MB

.svmp4
Size: 11.0MB - Virtual size: 11.0MB