baby-centre-pc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baby-centre-pc.exe
Size

4.2MB
MD5

8733fb760f0eef4a656fa54faf83c531
SHA1

7c062fa32c025a353bbc170a9e1d7fa8ae2852ab
SHA256

393baa638ed6af5dcb356924cf213ff89100b862958e1fabedc61354613a8189
SHA512

2b6c0d680d8b0a6b65eb12f5bcf7e7ccf9aae627bc30bdec5f88a717e90af64b8ca7a0cb6de301c82289d0580ba61f2701f4a3c2a5cf52be15c988611a025c98
SSDEEP

98304:iJHaxvf21ygktyXlM9oSJHaxvf21IlOf:iJHatfOygktyXlfSJHatfOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baby-centre-pc.exe

Files

baby-centre-pc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ