MalwareBazaar[.]1 | Triage™

General

Target
MalwareBazaar.1
Size 270KB
Sample240724-22ms8swbkh
SHA256 28766d53e02141d8332cdb160ebbc4bee6df26596d0c041e15aae650d6613d32
MD5 2922c109e30c924b0bc979434cc36f52
SHA1 4230742e046551ddc3145baf6ef5dcf99ba394f2
SHA512 db12152c664d45b6c7fcec8b13d8984da75b2bce265e006d1c7e013ad7183ff050ecdc908224060c99ad801365412bd4abe220d4ae8d5c6b7c669f8b27b2016b
SSDEEP 6144:E917J2Wor8Z4gPjdq5Q1a5Q75ybFvjyTLtnoa:EHTor8Z4gJGQp75qRy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.1

File Explorer

MalwareBazaar.1

.exe 270KB

MalwareBazaar.1

IMPHASH e22fde80595c4bea0880fd6845018d6a
SHA256 28766d53e02141d8332cdb160ebbc4bee6df26596d0c041e15aae650d6613d32
MD5 2922c109e30c924b0bc979434cc36f52
SHA1 4230742e046551ddc3145baf6ef5dcf99ba394f2
SHA512 db12152c664d45b6c7fcec8b13d8984da75b2bce265e006d1c7e013ad7183ff050ecdc908224060c99ad801365412bd4abe220d4ae8d5c6b7c669f8b27b2016b
SSDEEP 6144:E917J2Wor8Z4gPjdq5Q1a5Q75ybFvjyTLtnoa:EHTor8Z4gJGQp75qRy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

663552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\seje\mohesuwun\lufodaziyuv27\tedugi cukij sosavudaku\bozuy.pdb

kernel32

LoadLibraryA CreateMutexW SetLocaleInfoW FindNextVolumeW GetNamedPipeHandleStateA LocalFileTimeToFileTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterA CreateTimerQueueTimer TerminateProcess SetEvent FindNextFileW GetCompressedFileSizeA CopyFileExW BuildCommDCBW VerifyVersionInfoA FreeResource SetLastError GetVersionExA ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameW GetCommConfig WritePrivateProfileStructW LocalFree CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA LoadResource AddAtomW InitAtomTable GetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GlobalAlloc VerifyVersionInfoW InterlockedExchange FindFirstChangeNotificationW SearchPathW FormatMessageW SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID TerminateThread GlobalUnfix SetConsoleWindowInfo InterlockedDecrement GetStartupInfoA GetSystemWow64DirectoryW CopyFileA GetPrivateProfileIntA SetCalendarInfoW DebugBreak SetConsoleCursorInfo FreeLibraryAndExitThread GetModuleFileNameA SetConsoleScreenBufferSize WaitForDebugEvent InterlockedExchangeAdd GetOEMCP GetPrivateProfileStringW CreateActCtxA GetPrivateProfileIntW ReadConsoleInputW OutputDebugStringW SetThreadAffinityMask FlushConsoleInputBuffer lstrlenA WriteConsoleW OpenMutexW GetThreadContext DeleteCriticalSection QueryDepthSList ConvertFiberToThread SetProcessPriorityBoost LockFile FreeEnvironmentStringsA GetConsoleCP CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA CreateMailslotW GetCommState MoveFileWithProgressW GetSystemTimeAdjustment EnumSystemLocalesA GetLastError WriteProfileStringA OpenMutexA OpenWaitableTimerW OpenFileMappingW GetFileSizeEx GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetNumberFormatA BuildCommDCBAndTimeoutsW GetConsoleAliasExesA GetBinaryTypeW GetModuleHandleW Sleep InterlockedIncrement GetProcAddress ExitProcess MoveFileA DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree WriteFile GetStdHandle GetACP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharUpperW

Sharing