baza[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baza.exe
Size

14.1MB
MD5

2213d668e437266c0d55aa9116933c92
SHA1

550f79a437cc084ecf439d4883bec4aa1c356aaa
SHA256

85dec6d2ea4ac2a8038355608dfdb67f2b9325d2c3681a46c5d70bc76d669072
SHA512

ff0ecfdeadf74aa4a16ab550cba23f57e8566a5d8440b3d525054f1d90a16fba8a10bdf4277460533f0977988f029aee1b054a5e690222947229537f81c146b4
SSDEEP

393216:k7WNhXrjanM5pk4TdDWHMXESlhmyKmomp1Asn3ylEzXA:kCNhXXanM5WSWPSlhVKgOqE6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baza.exe

Files

baza.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.1MB - Virtual size: 14.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ