babylonrat | 75dd7f09bc910bf4ffb8c3744b867a90N[.]exe | Triage

Sharing

General

Target

75dd7f09bc910bf4ffb8c3744b867a90N.exe
Size

776KB
MD5

75dd7f09bc910bf4ffb8c3744b867a90
SHA1

52fe36f5e3c5bc761cadb5cfcd4aee97b75219d3
SHA256

f3cfa5ed96529245d6170a821e655eac16eaabf5cf3f731a926f6a6e99e1227d
SHA512

2c39e907c209da6d42cded95ee00e4a993c72a40b3a1961329c891fcd66d69c7b3d6989c0bd17535105f31aabc396e37a5b5d441d66b0a9b78716b8a4d33065f
SSDEEP

12288:dLz3rzOrDchlpQRLBIQS/3Qfi3Jaiclmj/jcb8bDrZXxXM6Dt3paPcg:dLz3rzOrG+JBIQ83X50mj/jnZX9PVg

Score

10^/10

babylonrat

Malware Config

Signatures

Babylonrat family
babylonrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
75dd7f09bc910bf4ffb8c3744b867a90N.exe

Files

75dd7f09bc910bf4ffb8c3744b867a90N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ