BACS7102024[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BACS7102024.exe
Size

422KB
MD5

51540b195ae4088b0f66b4bde64846aa
SHA1

7a4835a4d6ab612ed4e18cf327113d4bcbcbb214
SHA256

6d52cfe1a17595f2e96e599f47af727445ab0f6799c089f71d520a3dd4ebdf04
SHA512

b9a3a474cd394f213cbf04459c616baec355d1109a4ea11d33305e7ebe93a391b6c154ae6b38cf4089641576a89c8400a8a4f914090ac7e23c38eeba6da182a1
SSDEEP

12288:u0F4chZslcFBOWSSszb4PWaJwoHi/DyagoWuo0dIy6ZiIfT2YTJWCT4Ynu6yEeht:zSYTAC9nSvTVPOdiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BACS7102024.exe

Files

BACS7102024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\HHH887.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ