BakSoruSkill[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BakSoruSkill.exe
Size 5.7MB
Sample261027-rb643sdw71
SHA256 21e7dbc4ad9755134284f17905baf2d46d54c227a78cd52e5bb9c1e8578ede9b
MD5 e330833c9dd2f340f6e604a89e463ea3
SHA1 114b45b27eeeb3d0556214df2f4e396f0b8299bd
SHA512 7f83c6c9ad8eecee5fcd65ded8578db5183d53980cc4520fb72e25246a545e47bb9db50396ca216571ef9dde7fab49706fbc711bd80a143e755ac53da5d50083
SSDEEP 49152:v9nXC0jRcQyLbHybfNqydQd11BNXonPC1UGF/QsYcTc+mJ5PugPD8J8816uzPxu2:FpOCq1vtLq+LkI5uqb
TLSH
T1A0569D02B75B99ACD11AC4B08747A6631E6270CB0B36B9FF11C455393F6ABE05B3D70A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BakSoruSkill.exe

File Explorer

BakSoruSkill.exe

.exe 5.7MB

BakSoruSkill.exe

IMPHASH 554ad0b46e54fbb59ce61be5f045eea6
SHA256 21e7dbc4ad9755134284f17905baf2d46d54c227a78cd52e5bb9c1e8578ede9b
MD5 e330833c9dd2f340f6e604a89e463ea3
SHA1 114b45b27eeeb3d0556214df2f4e396f0b8299bd
SHA512 7f83c6c9ad8eecee5fcd65ded8578db5183d53980cc4520fb72e25246a545e47bb9db50396ca216571ef9dde7fab49706fbc711bd80a143e755ac53da5d50083
SSDEEP 49152:v9nXC0jRcQyLbHybfNqydQd11BNXonPC1UGF/QsYcTc+mJ5PugPD8J8816uzPxu2:FpOCq1vtLq+LkI5uqb
TLSH
T1A0569D02B75B99ACD11AC4B08747A6631E6270CB0B36B9FF11C455393F6ABE05B3D70A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3101032

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WriteConsoleW HeapAlloc SetHandleInformation GetFullPathNameW CreateFileW SetFileTime SetFileInformationByHandle FindFirstFileExW GlobalLock GetConsoleMode FindClose GetFileInformationByHandle GetModuleFileNameW GetLastError GetFileInformationByHandleEx CreateDirectoryW GetFileAttributesW DuplicateHandle MoveFileExW GetConsoleOutputCP GetProcessHeap GetStdHandle SetLastError GlobalFree GlobalAlloc HeapFree GlobalSize LoadLibraryExW SetThreadErrorMode FreeLibrary CloseHandle GetProcAddress GlobalUnlock Sleep GetModuleHandleA HeapReAlloc VirtualQueryEx LocalFree InitializeSListHead SetUnhandledExceptionFilter GetSystemTimeAsFileTime LoadLibraryExA CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW CompareStringOrdinal FreeEnvironmentStringsW GetEnvironmentStringsW ExitProcess FormatMessageW GetModuleHandleW WriteFileEx SleepEx ReadFileEx GetEnvironmentVariableW GetCurrentDirectoryW ReleaseMutex CreateMutexA GetCurrentProcessId lstrlenW LoadLibraryA WaitForSingleObjectEx GetCurrentProcess LoadLibraryW MultiByteToWideChar WideCharToMultiByte SwitchToThread GetCurrentThreadId GetSystemInfo QueryPerformanceCounter QueryPerformanceFrequency SetEvent CreateEventW GetThreadPriority WaitForMultipleObjects SetThreadPriority GetSystemTimePreciseAsFileTime Module32NextW Module32FirstW OpenProcess Process32NextW Process32FirstW GetUserDefaultLangID GetUserDefaultUILanguage QueryFullProcessImageNameW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler SetWaitableTimer CreateWaitableTimerExW GetExitCodeProcess WaitForSingleObject CreateThread CreateMutexW

user32

CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard EmptyClipboard SetClipboardData ReleaseDC PostMessageW GetWindowLongPtrW GetDC MonitorFromPoint RegisterClassExW CreateWindowExW IsProcessDPIAware PeekMessageW RegisterTouchWindow SetWindowDisplayAffinity SetWindowPos InvalidateRgn GetMonitorInfoW ChangeDisplaySettingsExW GetWindowPlacement SetWindowPlacement RedrawWindow GetMenu ScreenToClient DestroyWindow MonitorFromRect SetCapture ReleaseCapture TrackMouseEvent GetTouchInputInfo GetKeyboardState GetCursorPos LoadCursorW SetCursor EnumDisplayMonitors RegisterRawInputDevices SetTimer KillTimer TranslateMessage DispatchMessageW GetRawInputData ValidateRect CreateIcon DestroyIcon GetWindowRect GetWindowTextLengthW GetWindowTextW SetCursorPos SetWindowTextW FlashWindowEx GetClassNameW GetClassInfoExW RegisterWindowMessageA GetClipCursor ClipCursor ShowCursor GetSystemMenu EnableMenuItem SetWindowLongW GetWindowLongW AdjustWindowRectEx GetKeyboardLayout MapVirtualKeyExW ToUnicodeEx SystemParametersInfoA CloseTouchInputHandle GetKeyState MonitorFromWindow FindWindowW ShowWindow SetForegroundWindow DefWindowProcW ClientToScreen SetPropW SetWindowLongPtrW GetPropW CallWindowProcW RemovePropW CallNextHookEx GetWindowThreadProcessId IsWindowVisible IsIconic GetClientRect EnumWindows GetForegroundWindow GetAsyncKeyState MapVirtualKeyW SendInput SetWindowsHookExW GetMessageW UnhookWindowsHookEx IsWindow GetActiveWindow GetSystemMetrics SendMessageW CreateIconFromResourceEx

advapi32

ImpersonateAnonymousToken RevertToSelf

ole32

CoCreateInstance RevokeDragDrop OleInitialize RegisterDragDrop CoUninitialize CoInitializeEx

shlwapi

AssocQueryStringW

ntdll

RtlLookupFunctionEntry RtlNtStatusToDosError NtSetTimerResolution RtlCaptureContext RtlVirtualUnwind NtWriteFile NtOpenFile NtCreateNamedPipeFile NtReadFile

oleaut32

SafeArrayPutElement GetErrorInfo SetErrorInfo SysFreeString SafeArrayCreateVector SysStringLen SysAllocStringLen

shell32

DragFinish DragQueryFileW ShellExecuteW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

opengl32

wglGetCurrentDC wglDeleteContext wglGetCurrentContext wglShareLists wglCreateContext wglMakeCurrent wglGetProcAddress

gdi32

ChoosePixelFormat SetPixelFormat CreateRectRgn DeleteObject GetDeviceCaps DescribePixelFormat SwapBuffers

winmm

timeBeginPeriod

uiautomationcore

UiaHostProviderFromHwnd UiaLookupId UiaReturnRawElementProvider UiaRaiseAutomationEvent UiaRaiseAutomationPropertyChangedEvent UiaGetReservedNotSupportedValue

ws2_32

bind listen closesocket ioctlsocket accept WSAGetLastError recv send WSAStartup WSACleanup WSASocketW freeaddrinfo setsockopt getaddrinfo

crypt32

CryptUnprotectData CryptProtectData

winhttp

WinHttpReadData WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReceiveResponse WinHttpOpen WinHttpSetTimeouts WinHttpConnect WinHttpCloseHandle WinHttpOpenRequest WinHttpSendRequest

dwmapi

DwmEnableBlurBehindWindow

imm32

ImmGetContext ImmAssociateContextEx ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow ImmGetCompositionStringW

uxtheme

SetWindowTheme

vcruntime140

__CxxFrameHandler3 memcmp memcpy memmove _CxxThrowException __C_specific_handler __current_exception memset __current_exception_context

api-ms-win-crt-math-l1-1-0

sinf roundf powf cosf sin truncf round exp2f floorf _hypotf atan2f expf acosf cbrtf ceil fmod ceilf floor __setusermatherr trunc

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initterm _initterm_e exit _crt_atexit _exit _initialize_narrow_environment __p___argv _cexit _register_onexit_function _initialize_onexit_table _c_exit _set_app_type _seh_filter_exe terminate __p___argc _configure_narrow_argv _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode