babdc434b7ad8f289cd2159505fe0170N[.]exe

General

Target
babdc434b7ad8f289cd2159505fe0170N.exe
Size 113KB
Sample240805-wgrc2axcqe
SHA256 82b51380d3a8c5e574087a113c15fe3634d6b20fa3af387947695e5bbf07dc63
MD5 babdc434b7ad8f289cd2159505fe0170
SHA1 bb9ac828ed809beffd2dd7851aa6dd3bc2168c53
SHA512 74d9fe88b9788b15f18767fc5bc7fde034315c1b1953bc1a30a963df4ff733e302f6c1101904bb154eea7d548f8aafcd0da424099e70396b0f2578c4d1fc5492
SSDEEP 3072:OVS1/eI4pnTfEFYJE3nwzPdCNU/efHYTo+:OEHGnTcFYOXwJigT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
babdc434b7ad8f289cd2159505fe0170N.exe

File Explorer

babdc434b7ad8f289cd2159505fe0170N.exe

.exe 113KB

babdc434b7ad8f289cd2159505fe0170N.exe

IMPHASH eb2314ea789ef583e2167890ef42c85b
SHA256 82b51380d3a8c5e574087a113c15fe3634d6b20fa3af387947695e5bbf07dc63
MD5 babdc434b7ad8f289cd2159505fe0170
SHA1 bb9ac828ed809beffd2dd7851aa6dd3bc2168c53
SHA512 74d9fe88b9788b15f18767fc5bc7fde034315c1b1953bc1a30a963df4ff733e302f6c1101904bb154eea7d548f8aafcd0da424099e70396b0f2578c4d1fc5492
SSDEEP 3072:OVS1/eI4pnTfEFYJE3nwzPdCNU/efHYTo+:OEHGnTcFYOXwJigT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

135168

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Vinay\Projects\simple_launcher\dist\t64.pdb

kernel32

ExitProcess GetCommandLineW SearchPathW SetInformationJobObject CreateProcessW SetHandleInformation WaitForSingleObject WaitForSingleObjectEx AssignProcessToJobObject FormatMessageW GetExitCodeProcess GetModuleFileNameW QueryInformationJobObject MultiByteToWideChar GetStartupInfoW GetTempPathW CreateJobObjectA GetStdHandle GetLastError SetStdHandle GetFileType SetConsoleCtrlHandler SetCurrentDirectoryW CloseHandle HeapSize GetProcessHeap SetEndOfFile SetEnvironmentVariableW HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount GetCommandLineA RtlUnwindEx HeapSetInformation GetVersion HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetProcAddress GetModuleHandleW WriteFile SetHandleCount DeleteCriticalSection Sleep LCMapStringW ReadFile SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileW LoadLibraryW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW WriteConsoleW

shlwapi

StrStrIW PathRemoveFileSpecW PathCombineW

Name

.text

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

852B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zero

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

babdc434b7ad8f289cd2159505fe0170N.exe

kernel32

shlwapi

generic