ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb

Sharing

Copy URL Twitter E-mail

General

Target
ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb
Size 667KB
Sample240602-mdbnqsba26
SHA256 ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb
MD5 8db8a8111e065e44bd617b4e5c76ecc8
SHA1 a0f90c9a2f88f0264069713df869bbeb9566607c
SHA512 52d7a2653224265280a340febf009c9f59bbd317e5a8574717e5ffb91350fdb9790140a545760c97fb8c28c848706b56d90bbafab847adaca05c62234900ba49
SSDEEP 12288:76JJG//tnC5VCFSoDpaQlHfl6mCiWDaBMNCobnG:76J6/tniVNoDgQVN6mCip9obG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb

File Explorer

ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb

.exe 667KB

ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb

IMPHASH beb5959bb1e83e2e3f4789da7e63bdcd
SHA256 ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb
MD5 8db8a8111e065e44bd617b4e5c76ecc8
SHA1 a0f90c9a2f88f0264069713df869bbeb9566607c
SHA512 52d7a2653224265280a340febf009c9f59bbd317e5a8574717e5ffb91350fdb9790140a545760c97fb8c28c848706b56d90bbafab847adaca05c62234900ba49
SSDEEP 12288:76JJG//tnC5VCFSoDpaQlHfl6mCiWDaBMNCobnG:76J6/tniVNoDgQVN6mCip9obG
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DODO\Videos\TwoStageSearch\TwoStageSearch\TwoStageSearch\Release\TwoStageSearch.pdb

kernel32

Sleep GetExitCodeProcess ReadFile CreateFileW GetTempPathW GetFileSizeEx GetLastError GetCurrentDirectoryW GetProcAddress VirtualAlloc FindClose SetCurrentDirectoryW FindNextFileW CloseHandle DeleteFileW FlushFileBuffers GetFullPathNameA WriteConsoleW CreateProcessW WaitForSingleObject ReadConsoleW SetEndOfFile GetTimeZoneInformation SetStdHandle RtlUnwind HeapReAlloc OutputDebugStringW LoadLibraryExW FreeLibrary SetConsoleCtrlHandler SetFilePointerEx GetConsoleMode GetConsoleCP LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LoadLibraryW GetStringTypeW SetEnvironmentVariableW LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter DeleteCriticalSection RaiseException GetFileAttributesExW CreateSemaphoreW GetTickCount GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess CreateEventW InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter GetFullPathNameW PeekNamedPipe GetFileType GetFileInformationByHandle FileTimeToLocalFileTime HeapSize GetModuleFileNameW WriteFile GetStdHandle AreFileApisANSI GetModuleHandleExW ExitProcess GetProcessHeap WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId GetModuleHandleW GetLocaleInfoW FindFirstFileExW GetLogicalDriveStringsW GetEnvironmentVariableW GetCurrentThread SetLastError GetCPInfo GetOEMCP SetFilePointer FindFirstFileW CreateFileA GetTempFileNameW FatalAppExitA GetACP IsValidCodePage GetCommandLineW HeapFree HeapAlloc EncodePointer DecodePointer GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime IsDebuggerPresent IsProcessorFeaturePresent SetEnvironmentVariableA

user32

EndPaint ClientToScreen DestroyWindow GetWindowTextLengthW TranslateAcceleratorW ScreenToClient GetWindowRect SetActiveWindow GetMessageW SendInput PostQuitMessage SetKeyboardState GetKeyState GetSubMenu GetFocus DialogBoxParamW GetParent LoadCursorW GetClipCursor FindWindowW GetClientRect SetFocus BeginPaint wsprintfW TranslateMessage LoadAcceleratorsW GetKeyboardState GetMenu RegisterClassExW OffsetRect GetAsyncKeyState MessageBoxA SetCursorPos LoadMenuW GetAncestor GetWindowTextW PeekMessageW GetDlgItem EndDialog GetDesktopWindow GetCursorPos LoadStringW EnumChildWindows ShowWindow SetMenu GetSysColorBrush LoadBitmapW CreateDialogParamW FindWindowExW ClipCursor CreateWindowExW SetMenuDefaultItem MessageBoxW GetComboBoxInfo GetSystemMetrics IsWindowVisible SendMessageW UpdateWindow GetDlgCtrlID SetWindowTextW DefWindowProcW CopyRect GetWindow MoveWindow DispatchMessageW LoadIconW

gdi32

CreateFontW DeleteObject

advapi32

CryptAcquireContextA

shell32

ShellExecuteW SHOpenWithDialog ShellExecuteExW

comctl32

ord413 ImageList_Add ImageList_Create ord410

shlwapi

ord191 PathMatchSpecW

Sharing

General

Malware Config

Signatures

File Explorer

ba22a94ee6cbf08b38b4bc750e16f8af4cac9f8fb6ba9ff0455c3f891f0261eb

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

generic