2024-06-15_68c75b300db1f39e9cba6a3d307a9c28_babuk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-15_68c75b300db1f39e9cba6a3d307a9c28_babuk
Size

102KB
MD5

68c75b300db1f39e9cba6a3d307a9c28
SHA1

be0d30f291fd93bf157b87af4c87f7fc6d06580e
SHA256

d9cd5ec7b6a8c164be359b166a02fdf4a9d0de1280d9bbaa548423fb5dd4f302
SHA512

27f59b7dc6f3733de153dfcf523d9122a7ca68577914e2aab6a92813f8a317f927d8c9332e09a42c96ef986298fb5362c165fe36ecf725b3b852abcea92423f2
SSDEEP

1536:Lx9xOfWQPFxcEI+VCIKQsqlAzWhsviNxu7wt6s1yjw5WnUNabYRef8FiTAJGXkdy:LxquyFOIbSsCRUSoYyq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-15_68c75b300db1f39e9cba6a3d307a9c28_babuk

Files

2024-06-15_68c75b300db1f39e9cba6a3d307a9c28_babuk
.exe windows:5 windows x86 arch:x86

c6749edf387fd5e43fe41515302a894d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitThread
WideCharToMultiByte
LocalAlloc
lstrlenA
GetProcAddress

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ