General

  • Target

    Package.tar

  • Size

    5.8MB

  • MD5

    74a97275a336ebca7e0d405188553507

  • SHA1

    3bcae9d53df03f0ad03ef6e12100ef012430f8ff

  • SHA256

    28836a8e5d0a902b442e6f430433018a0b76f0a9f9c3fb9f7d14c365a07a1a5b

  • SHA512

    48cd5b24c6813fc033cac6678c701904109030e0bda066f0e642c72e63a7a86e971423959fa4690caf92b07e19707959a3018db9f79343669c98035d1b437db7

  • SSDEEP

    98304:XWmtbF605bOZ7J9XEHLQcbjDhE/YVAUNWqSBnQqIP:m2bFTOZtlEH3REASpny

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Package.tar
    .tar
  • Package/BException.dll
    .dll windows:4 windows x86 arch:x86

    6043255cb3cc74dec0aef719287a6935


    Headers

    Imports

    Exports

    Sections

  • Package/BabyServices.dll
    .dll windows:4 windows x86 arch:x86

    59586c98fcfc4eb47a367fef6517ab84


    Headers

    Imports

    Exports

    Sections

  • Package/Babylon.exe
    .exe windows:4 windows x86 arch:x86

    588385192249056dd9c9ef626b461f02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Package/puffball.app