ba618b945e0ffb2709208d3c4bd15960

General

Target
ba618b945e0ffb2709208d3c4bd15960
Size 317KB
Sample231227-3f6jwsdcf6
SHA256 52d50c8eb51d3c1cca7baf57353f24943b8c880446ce53ca4e79db8844205503
MD5 ba618b945e0ffb2709208d3c4bd15960
SHA1 b362a624a30f49f9a306dedba93dc02b1a1153c3
SHA512 3777665a6c422fc528cd8d1f1d9aa1975abd7ebaee86f3f26191b512558255228a759d5b64dcf7fa0dec1991d174829b18b71bc646ea412b6e63fb695602c06f
SSDEEP 6144:GdumyxikXUcgH1R8GdNGcX7+YAyA5wcs4R:g2ikEX1R8ncLDJhQR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba618b945e0ffb2709208d3c4bd15960

File Explorer

ba618b945e0ffb2709208d3c4bd15960

.exe 317KB

ba618b945e0ffb2709208d3c4bd15960

IMPHASH ce1fdab3df1e2c070cc03b5d515ae746
SHA256 52d50c8eb51d3c1cca7baf57353f24943b8c880446ce53ca4e79db8844205503
MD5 ba618b945e0ffb2709208d3c4bd15960
SHA1 b362a624a30f49f9a306dedba93dc02b1a1153c3
SHA512 3777665a6c422fc528cd8d1f1d9aa1975abd7ebaee86f3f26191b512558255228a759d5b64dcf7fa0dec1991d174829b18b71bc646ea412b6e63fb695602c06f
SSDEEP 6144:GdumyxikXUcgH1R8GdNGcX7+YAyA5wcs4R:g2ikEX1R8ncLDJhQR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA SetLocalTime FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile TlsSetValue GlobalAlloc VirtualFreeEx LoadLibraryW GetConsoleMode _hread GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile GetSystemDirectoryA GetBinaryTypeW ExitThread VirtualUnlock DeactivateActCtx CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress GetProcessHeaps CreateNamedPipeA SetStdHandle SetComputerNameA VerLanguageNameW BuildCommDCBW LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW SetConsoleWindowInfo FindAtomA SetConsoleTitleW QueryMemoryResourceNotification WriteProfileStringW VirtualProtect CompareStringA GetFileAttributesExW _lopen TlsAlloc GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId GetProfileSectionW LCMapStringW CopyFileExA CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP InitializeCriticalSectionAndSpinCount FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

ba618b945e0ffb2709208d3c4bd15960

kernel32

user32

generic