bab1912f10355b913050217669acc322[.]exe

General

Target
bab1912f10355b913050217669acc322.exe
Size 390KB
Sample241024-t4ampasfmb
SHA256 38dc7521a2e99fb4c095f74b51dadf8b10fdf680ecbcecb419e6720e8151096d
MD5 bab1912f10355b913050217669acc322
SHA1 17848e8aa5e443c06d495c500e642be0967cabe6
SHA512 a96a1b0190a97e1d61ae00d82e85ab720a80c976d0f450eeaa4a9237ea337dc674746e23c458aa3023044cb7f9b6ad9d39a73c4401875876192d14fc437d012a
SSDEEP 6144:StLH/6zftGuIHMvxZ8NQhrOjAx99iqyyvw9R81aPFhbpxA5HcH/kWTW:SqfIu2GmOssxyyIL81aPFhtGuj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab1912f10355b913050217669acc322.exe

File Explorer

bab1912f10355b913050217669acc322.exe

.exe 390KB

bab1912f10355b913050217669acc322.exe

IMPHASH 60292dd185c67d0ddd8dc10e8ecfb2bb
SHA256 38dc7521a2e99fb4c095f74b51dadf8b10fdf680ecbcecb419e6720e8151096d
MD5 bab1912f10355b913050217669acc322
SHA1 17848e8aa5e443c06d495c500e642be0967cabe6
SHA512 a96a1b0190a97e1d61ae00d82e85ab720a80c976d0f450eeaa4a9237ea337dc674746e23c458aa3023044cb7f9b6ad9d39a73c4401875876192d14fc437d012a
SSDEEP 6144:StLH/6zftGuIHMvxZ8NQhrOjAx99iqyyvw9R81aPFhbpxA5HcH/kWTW:SqfIu2GmOssxyyIL81aPFhtGuj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalCompact CreateProcessW InterlockedIncrement GetCurrentProcess GetLogicalDriveStringsW CreateJobObjectW SetComputerNameW SetVolumeMountPointW GetComputerNameW GetTickCount GetCommConfig ClearCommBreak GetConsoleAliasExesW EnumTimeFormatsW TlsSetValue GetEnvironmentStrings SetFileShortNameW ReadConsoleInputA GetVersionExW GetFileAttributesA GlobalMemoryStatus GetModuleFileNameW GetShortPathNameA VerifyVersionInfoW InterlockedExchange GetLastError SetLastError GetProcAddress VirtualAlloc DefineDosDeviceW CreateNamedPipeA SetFileAttributesA LoadLibraryA GetNumberFormatW OpenJobObjectW SetEnvironmentVariableA GetCurrentDirectoryA OpenEventW LCMapStringW CommConfigDialogW GetTimeFormatW GetTempFileNameW HeapAlloc HeapReAlloc GetStartupInfoW RaiseException DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

gdi32

GetCharWidth32A

Sharing