bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580[.]exe

General

Target
bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe
Size 419KB
Sample240429-b3ldpaee47
SHA256 bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580
MD5 27bdf1a30740d66ac16cb2924842fc4c
SHA1 bf5f648b4b4a1a928b0f38ea21800cba55fab626
SHA512 afe92674a427ddc2a89630499cfce84effe57c9dbfa710ec3f3ea9ec1064a2d00c52177e4bd09e64d1e4248c57f9492a99bfbe4a82b85679fb0323ff3fb3aaf0
SSDEEP 6144:JWigHbPbnW5OdaZLB+zKwTTfRLpEGzYSIpB5Apy3E6Y:JZ2zzsZN+JTTlptIp7AIU6Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe

File Explorer

bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe

.exe 419KB

bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe

IMPHASH dbae00ef186abcf460fe21c920859d79
SHA256 bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580
MD5 27bdf1a30740d66ac16cb2924842fc4c
SHA1 bf5f648b4b4a1a928b0f38ea21800cba55fab626
SHA512 afe92674a427ddc2a89630499cfce84effe57c9dbfa710ec3f3ea9ec1064a2d00c52177e4bd09e64d1e4248c57f9492a99bfbe4a82b85679fb0323ff3fb3aaf0
SSDEEP 6144:JWigHbPbnW5OdaZLB+zKwTTfRLpEGzYSIpB5Apy3E6Y:JZ2zzsZN+JTTlptIp7AIU6Y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW GetCommState GetModuleHandleW GetProcessHeap GetDateFormatA GlobalAlloc LoadLibraryW HeapDestroy IsBadWritePtr GetModuleFileNameW SetConsoleTitleA GlobalUnfix SetCurrentDirectoryA GetProcAddress SetFirmwareEnvironmentVariableW GetConsoleAliasExesLengthA LoadLibraryA GetFileType SetConsoleDisplayMode WaitForMultipleObjects FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW GetVolumeInformationW BuildCommDCBW GetLocaleInfoA CreateFileA HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetProcessDefaultLayout

advapi32

ReadEventLogA

ole32

CoTaskMemFree

Sharing