babccb675573f678a4187b1222e4f9946c449eca304af071914cbf2003197d1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

babccb675573f678a4187b1222e4f9946c449eca304af071914cbf2003197d1a
Size

123KB
MD5

1ed97bcfb49e99cf1e3ca18c3b4ad149
SHA1

a434656a472ac564a8e55bf97c2c0e90aa1283a2
SHA256

babccb675573f678a4187b1222e4f9946c449eca304af071914cbf2003197d1a
SHA512

a9f438f3e338f086fb35e1b205eb52748064b6e13193c18676da541d5b537329eb10a8513b6b46c739e006bcd9e1922532b9e2c6822b3a06e7d4152ed248313d
SSDEEP

1536:ZzoXqCw0L0oxPQ2a1zSD0KW38s6Im2rmoU11cGXtP/4R9QZB5A3UqTrZa7fSa0Pi:TCw0dREKu7m2rnC1cG1c3UqRa7albI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
babccb675573f678a4187b1222e4f9946c449eca304af071914cbf2003197d1a

Files

babccb675573f678a4187b1222e4f9946c449eca304af071914cbf2003197d1a
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ