Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_6ca40f3f712a9d7a3e39da2e34c9ed6d_babuk.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-11_6ca40f3f712a9d7a3e39da2e34c9ed6d_babuk.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-11_6ca40f3f712a9d7a3e39da2e34c9ed6d_babuk
-
Size
68KB
-
MD5
6ca40f3f712a9d7a3e39da2e34c9ed6d
-
SHA1
be9335e42a08b7d46a14de0a5de379f4f2541761
-
SHA256
fd6d29b917485ad886e2181ec8fc630071bd17e0c3f84d741229d9d35985df90
-
SHA512
fb434180a937e5587a59de995abbac9aee870a8af7248e30585d1d22dd98a301f6d6d2b86cbc352aa76de99a8fc02a7685cd6ca013921aae9804f5918b135130
-
SSDEEP
1536:ykiUeTD0DsbEmDx1xhiBsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2hyqM8EQ:yHUeTD0gbrDx1xusrQLOJgY8Zp8LHD4D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-11_6ca40f3f712a9d7a3e39da2e34c9ed6d_babuk
Files
-
2024-06-11_6ca40f3f712a9d7a3e39da2e34c9ed6d_babuk.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ