bab6a964c63fcaf689b1f3bb9f64f0790f0f0062d587b1954304b051579c2032 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bab6a964c63fcaf689b1f3bb9f64f0790f0f0062d587b1954304b051579c2032
Size

75KB
MD5

e3935734900e53edcf9db3896d842c33
SHA1

bb537a9bb0f825a908fd4fdbb0a7b6d74668a974
SHA256

bab6a964c63fcaf689b1f3bb9f64f0790f0f0062d587b1954304b051579c2032
SHA512

e6e7e03746fc3bd2292e3d83e3bf2dc90c13f0d45ef0b9d5770b19c5f91cc19dbddf96d6c664d2198bfd29776d2cbcb274ff57d06544386c4e098ab92af2c6e5
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOqZ0:GhfxHNIreQm+HiFZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab6a964c63fcaf689b1f3bb9f64f0790f0f0062d587b1954304b051579c2032

Files

bab6a964c63fcaf689b1f3bb9f64f0790f0f0062d587b1954304b051579c2032
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PEC
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE