bab56e71e7d0fd683b14b74d4001697550a93aacb5ce42313a8c32945d33d4bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bab56e71e7d0fd683b14b74d4001697550a93aacb5ce42313a8c32945d33d4bd
Size

36KB
MD5

b2c7a9cb1860415a6ff0cbac52d9c9e9
SHA1

a445efc1e8b1f9f09ad778ed6fc0d26ea7673e73
SHA256

bab56e71e7d0fd683b14b74d4001697550a93aacb5ce42313a8c32945d33d4bd
SHA512

92d3d3ad212b06fb30c000b2748bf04192aab4884d7850ed890d434b72fbafb1029127bfc7f24642e15af16b92d05fb449b07bd28811a1fa80ec86679d5ddb0c
SSDEEP

768:cbfobMX7Y7iV6QfNExygnLHB76SG2W979PBD59X0bUT5IP0p/Np3MG:cjoYXyc9fGxHoD2W9795v0bUTGP0p/v7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab56e71e7d0fd683b14b74d4001697550a93aacb5ce42313a8c32945d33d4bd

Files

bab56e71e7d0fd683b14b74d4001697550a93aacb5ce42313a8c32945d33d4bd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ