bab13d411ab55ab70ba8319a9c548490N[.]exe | Triage

Sharing

General

Target

bab13d411ab55ab70ba8319a9c548490N.exe
Size

472KB
MD5

bab13d411ab55ab70ba8319a9c548490
SHA1

916595c91985c1b0b58b84d0cb44c77692087ba8
SHA256

db8e46466f65679f465514489bf849dc8632e27d3ea5b982ce710a91b030b307
SHA512

dc2c2123420bf743ecf500fe23a091c7e5f468688f86d66748476b4864a615951b4be19c229f2d3bf6064f903f1a6c11466b05d1c528006476c39c6d05020c9c
SSDEEP

3072:d7n8RinudiP52xx67lLdFiHDoP7B7nwkWshvIDG6YGJ1fw:dokgiPA6RLPPlYQveGpafw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab13d411ab55ab70ba8319a9c548490N.exe

Files

bab13d411ab55ab70ba8319a9c548490N.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ