BA Copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BA Copy.exe
Size

531KB
MD5

8d2a808c298f8eb11f4eb7cf61a3a950
SHA1

dcac62dc65caf97342cb3baea03e5c1b6c3cc124
SHA256

1d507bf363414ee632d706b9c53f5351715c641585a54c9cbc93f82c880fda02
SHA512

fa3110ab809f55fb2809f06672ab67985c02714d1b99613fbde8835a698734bd610d1542e48898d27c5fe3e1f32c3665988010a96821887cf351a326d77a6db7
SSDEEP

12288:RYUaGLFgg0/Iw2byDc7YH6sw7EYsmoi0VUjSjn:yUaGLFgH/4yDcEHFSEYVaUGjn

Score

1^/10

Malware Config

Signatures

Files

BA Copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 525KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ