bab1cae3cee6435a4bf64351336f0ca2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bab1cae3cee6435a4bf64351336f0ca2
Size

336KB
MD5

bab1cae3cee6435a4bf64351336f0ca2
SHA1

abf0f5a676344b693706be53d0f6ed90a7c7127c
SHA256

2c945b75a790006d9d6160531d00abe7b0d91dc7a3c0555efae671f80dac087f
SHA512

b29c47af0fb94dc59d1b1b7e0ffa4297ebeeb6020c4423ecbb5e36f4f93b7185bc5a17a03985fcebb0758b30dc2c28bd180aab1e7c275491a30d9e09a27677a6
SSDEEP

6144:nQsMYRiYRsedjZWZtWMMBh72gSMlc6PV3lHb8R2vlHQLCPEGNun1Q0O:wBYRseHWVMnhZl8E91sn1tO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab1cae3cee6435a4bf64351336f0ca2

Files

bab1cae3cee6435a4bf64351336f0ca2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

IoquhumyJetaba
IobyloSy
KexejakoMesi
Ntlilo

Sections

.text
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ