Bugasys[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Bugasys.exe
Size 15.4MB
Sample261113-anmsjad14t
SHA256 9771d7d0d06a4aa2c469b7c765c0687164d28f4fa1ad1b8874f6ad6f0596eb0a
MD5 629e1f5bc8a272ac3e5396e1eefb07f2
SHA1 f374f068644695c63fe6202d8beeee79a8be0db0
SHA512 3db523b54f6c336533b6707031b29bd9f57f4dc0e7d9332881de84b8e62ff39cc25fdc4c51cd3fbdad6b4176df6c81f2f2d0939978536bb215dada7de1ae37a4
SSDEEP 393216:aRuu0j0/7Zrc/AKeCJ0Dn1Pgr2w6SqSQwwVsyKS1QocZqEA:K0jAZrqAEJ0b1Y8F7fJ1LcZo
TLSH
T12FF633565B5F2512FC2890320274DE4A777E09D62B30CA87DFA489DEFE3A3D1442C66E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bugasys.exe

File Explorer

Bugasys.exe

.exe 15.4MB

Bugasys.exe

IMPHASH 3cd385cbf72952d9412ff1bb77cc134a
SHA256 9771d7d0d06a4aa2c469b7c765c0687164d28f4fa1ad1b8874f6ad6f0596eb0a
MD5 629e1f5bc8a272ac3e5396e1eefb07f2
SHA1 f374f068644695c63fe6202d8beeee79a8be0db0
SHA512 3db523b54f6c336533b6707031b29bd9f57f4dc0e7d9332881de84b8e62ff39cc25fdc4c51cd3fbdad6b4176df6c81f2f2d0939978536bb215dada7de1ae37a4
SSDEEP 393216:aRuu0j0/7Zrc/AKeCJ0Dn1Pgr2w6SqSQwwVsyKS1QocZqEA:K0jAZrqAEJ0b1Y8F7fJ1LcZo
TLSH
T12FF633565B5F2512FC2890320274DE4A777E09D62B30CA87DFA489DEFE3A3D1442C66E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

118808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mpr

WNetGetUniversalNameA

kernel32

WritePrivateProfileStringA FreeResource LockResource LoadResource FindResourceA GlobalReAlloc GetVersion OpenFile SizeofResource ResumeThread SetPriorityClass GetCurrentThread SetThreadPriority WriteFile GetModuleFileNameA FileTimeToDosDateTime GetSystemTimeAsFileTime SetEvent GetPrivateProfileStringA WaitForSingleObjectEx CreateEventA SetEnvironmentVariableA CompareStringW CompareStringA LCMapStringW LCMapStringA FlushFileBuffers RtlUnwind GetEnvironmentStringsW MultiByteToWideChar FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetStringTypeW GetStringTypeA GetOEMCP GetACP GetCPInfo SetStdHandle GetStdHandle SetHandleCount SetEndOfFile VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetCommandLineA GetStartupInfoA GetLocalTime GetSystemTime GetTimeZoneInformation GetDiskFreeSpaceA CreateDirectoryA ExitProcess RemoveDirectoryA HeapReAlloc SetFilePointer ReadFile GetFileType HeapFree HeapAlloc GetVersionExA GetFileTime CompareFileTime GetSystemDirectoryA MoveFileExA GetWindowsDirectoryA GetShortPathNameA FindClose DeleteFileA MoveFileA GetTempPathA GetTempFileNameA _llseek _lread CreateProcessA GetExitCodeProcess FindFirstFileA FindNextFileA CopyFileA SetErrorMode GetFileAttributesA lstrcatA SetLastError Sleep TerminateProcess GetCurrentProcess DuplicateHandle CreateRemoteThread WaitForSingleObject GetLastError OpenProcess WideCharToMultiByte GetModuleHandleA _lopen _lwrite _lclose lstrlenA lstrcpyA LoadLibraryA GetProcAddress FreeLibrary GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetDriveTypeA CreateFileA DosDateTimeToFileTime LocalFileTimeToFileTime SetFileTime CloseHandle SetFileAttributesA GetEnvironmentStrings

user32

PostQuitMessage LoadImageA CheckDlgButton BeginPaint EndPaint EnableWindow GetClassLongA LoadBitmapA GetSysColor DefWindowProcA IsChild GetFocus MessageBoxA DestroyWindow GetWindowLongA IsDlgButtonChecked GetWindowTextA EndDialog SetWindowLongA PtInRect DestroyIcon wsprintfA SendMessageA GetMessageA CreateWindowExA RegisterClassA LoadCursorA LoadIconA InvalidateRect SetTimer ReleaseDC GetDC KillTimer CharPrevA CheckRadioButton GetParent CallWindowProcA OpenClipboard GetClipboardData GetWindowThreadProcessId EnumWindows PostMessageA BringWindowToTop CloseClipboard IsDialogMessageA DialogBoxParamA CreateDialogParamA ExitWindowsEx CreateIconFromResourceEx CreateIconFromResource CharUpperA ShowWindow GetDlgItem DrawTextA GetSysColorBrush FillRect SetDlgItemTextA SetWindowTextA OffsetRect GetSystemMetrics PeekMessageA TranslateMessage DispatchMessageA GetWindowRect GetClientRect MoveWindow GetWindow GetClassNameA GetDesktopWindow ScreenToClient CharLowerA IsWindow SendMessageTimeoutA SetForegroundWindow SetClassLongA

gdi32

CreateFontA CreateFontIndirectA GetTextExtentPointA StretchBlt SetBkMode DeleteObject GetObjectA RealizePalette SelectPalette CreatePalette StretchDIBits DeleteDC BitBlt SelectObject CreateCompatibleBitmap GetDeviceCaps CreateCompatibleDC PatBlt CreateSolidBrush GetTextMetricsA AddFontResourceA GetStockObject SetTextColor GetDIBits

advapi32

RegOpenKeyA RegCloseKey AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken OpenThreadToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid RegOpenKeyExA RegDeleteValueA OpenSCManagerA CreateServiceA OpenServiceA ControlService QueryServiceStatus DeleteService CloseServiceHandle RegSetValueExA RegCreateKeyA RegQueryValueExA

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHFileOperationA SHChangeNotify SHGetMalloc SHGetSpecialFolderLocation SHGetDesktopFolder FindExecutableA ShellExecuteA SHGetFileInfoA

ole32

CoInitialize CoUninitialize CoCreateInstance OleUninitialize OleInitialize

comctl32

PropertySheetA ImageList_Destroy ImageList_Create ImageList_ReplaceIcon

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA