-a2-ob-bab[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

-a2-ob-bab.exe
Size

1.2MB
MD5

5d9989a4071a57f68ec449e86f7934ed
SHA1

ea6939469377e56c4fc604f7269b7f3e493db533
SHA256

92d1549e0558812ab7ce52131a381a825e2a779d0d115f6cd93929d2f94011e3
SHA512

95395ec3429f26912ebaa7a9853f63336ab159e8905321e7d89d789ac484f408447775889ab963e1fdc6a053a827d748e4cb0e0a6443a7d4149d2d6192b6cb99
SSDEEP

24576:EQzSlVY5cF7lpV3jLDn+dkg3LZUTJNHq5qqCJCCezDbL+vZq:KlSeF7VbtKWTLHqEXCm4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
-a2-ob-bab.exe

Files

-a2-ob-bab.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ