Babylon12_Setup[.]exe

General

Target
Babylon12_Setup.exe
Size 670KB
Sample240222-cyldkaae8s
SHA256 3ba30ffbb1a0059f5d0c2de7b38a33ba05031404d8cd8c970e50861e4c892475
MD5 5cc9e44078f5a9740fa7692c8252a25a
SHA1 ad2256d2cf6d13e8aef26089bafa70c480c73623
SHA512 e024c97ca1273cd0660d128aad5ba44aa020701f50b9b6fd391576c652967876a7ea5cb18a84ef3a6b95a376d0cfe1d3c2119d9afd32d34378235ee369b002fa
SSDEEP 12288:7Wb5/jrfSV8RvOSmnIYVrr9bw9nwqfFBDuYGW+f7Ybf0H7n239fV:7gF3fSCRmSdyG9jlXGW+fv239t
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Babylon12_Setup.exe

File Explorer

Babylon12_Setup.exe

.exe 670KB

Babylon12_Setup.exe

IMPHASH d6bfd88b18ee13bc37be7a4ab036052b
SHA256 3ba30ffbb1a0059f5d0c2de7b38a33ba05031404d8cd8c970e50861e4c892475
MD5 5cc9e44078f5a9740fa7692c8252a25a
SHA1 ad2256d2cf6d13e8aef26089bafa70c480c73623
SHA512 e024c97ca1273cd0660d128aad5ba44aa020701f50b9b6fd391576c652967876a7ea5cb18a84ef3a6b95a376d0cfe1d3c2119d9afd32d34378235ee369b002fa
SSDEEP 12288:7Wb5/jrfSV8RvOSmnIYVrr9bw9nwqfFBDuYGW+f7Ybf0H7n239fV:7gF3fSCRmSdyG9jlXGW+fv239t
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

19557

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

P:\BabylonSoftware\Release_Win32\SetupStub.pdb

kernel32

GetCommandLineW lstrlenW CreateFileW DeleteFileW WriteFile CloseHandle HeapAlloc HeapReAlloc HeapFree GetProcessHeap InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetCurrentProcessId GetCurrentThreadId GetSystemTime GetPrivateProfileIntW GetFileSize ReadFile GetLastError GetStartupInfoW SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW SetFileTime GetModuleFileNameW lstrlenA MultiByteToWideChar VirtualAlloc VirtualFree GetProcAddress LoadLibraryA WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize GetStringTypeW GetFileType SetStdHandle LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA DecodePointer GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException GetStdHandle GetModuleFileNameA WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP

user32

wsprintfA wsprintfW

shell32

SHGetFolderPathW

shlwapi

StrChrA PathFileExistsW PathAddBackslashW wnsprintfW wvnsprintfW StrCpyW StrCmpNA StrNCatW PathGetArgsW StrCpyNW StrStrIW StrChrW StrStrA StrCatW StrToIntA

Sharing