bada40e7ac95f8a57f7b90115cd04e9b

General

Target
bada40e7ac95f8a57f7b90115cd04e9b
Size 419KB
Sample240308-kyymwsbb96
SHA256 dda579fac53b62f178780c65f278921827b6345f3cd0d3af174fabf8892ad3d7
MD5 bada40e7ac95f8a57f7b90115cd04e9b
SHA1 1685bf9d5a1086fed8f914f034ccfeac4b5ec1a5
SHA512 8e0e387bd0d0cab8e07475cdce1cdf605bc705d592c2ce760ec33337b2bef27ce69dfd6fd1a299619318bd26064783de50c9cb9050dc002e78b9ac667557f221
SSDEEP 12288:hdx+VvjNLPkByKykog3Rj6gtsvKn3lzh3c:lggkzOj6gtsvKnVzh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bada40e7ac95f8a57f7b90115cd04e9b

File Explorer

bada40e7ac95f8a57f7b90115cd04e9b

.exe 419KB

bada40e7ac95f8a57f7b90115cd04e9b

IMPHASH 648d80ab383d01ef3dcdfdac14d78fcd
SHA256 dda579fac53b62f178780c65f278921827b6345f3cd0d3af174fabf8892ad3d7
MD5 bada40e7ac95f8a57f7b90115cd04e9b
SHA1 1685bf9d5a1086fed8f914f034ccfeac4b5ec1a5
SHA512 8e0e387bd0d0cab8e07475cdce1cdf605bc705d592c2ce760ec33337b2bef27ce69dfd6fd1a299619318bd26064783de50c9cb9050dc002e78b9ac667557f221
SSDEEP 12288:hdx+VvjNLPkByKykog3Rj6gtsvKn3lzh3c:lggkzOj6gtsvKnVzh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8745

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xusasesa\guvafubohonik32\xosa.pdb

kernel32

GetCPInfo GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW GetUserDefaultLCID SetVolumeMountPointW GetUserDefaultLangID GetCommandLineA GetEnvironmentStrings GlobalAlloc WriteConsoleOutputA GetVersionExW lstrcpynW LocalReAlloc HeapQueryInformation ReadFile GetModuleFileNameW VerifyVersionInfoW lstrlenA ChangeTimerQueueTimer GetProcAddress AttachConsole PeekConsoleInputW GetComputerNameExW VerLanguageNameA CreateTimerQueueTimer FreeUserPhysicalPages GetLocalTime LoadLibraryA BeginUpdateResourceA GetCurrentConsoleFont SetEnvironmentVariableA GetConsoleTitleW BuildCommDCBA VirtualProtect FindFirstVolumeA ReleaseMutex ReadConsoleInputW GetVersion AddConsoleAliasA EnumCalendarInfoExA LCMapStringW CreateThread CreateFileA SetStdHandle GetCPInfoExW WriteConsoleW GetConsoleOutputCP WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoA RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

bada40e7ac95f8a57f7b90115cd04e9b

kernel32

user32

generic