bBaNINivtu[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bBaNINivtu.exe
Size

13.4MB
MD5

27bbace5d7a5f6421c3bd47fecd96406
SHA1

4171d346b57013bde2b18cb0d943cb59d2310905
SHA256

ca1ff761b2a986e1788c01e6bef6445652b9aa2918ffb9ec42e8fd71e818888d
SHA512

83b338304d03f93be4fe10310b7e07a3ef778bf6acc69e343885243d0ec878568bd9bb9b219bf002684df222269db0d59ca5cd85d03ef2169ec5d83759147f74
SSDEEP

196608:bmSmLLo3U9y4khOLjSQHRTsbLe5EF48kR4UeW2JFru3k3JWcZrz+XV:b0o3yEOLeggPF4feUeW2S3mwcZ0

Score

N/A

Malware Config

Signatures

Files

bBaNINivtu.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.4MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ