bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6

General

Target
bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6
Size 218KB
Sample241113-clltkaxqfr
SHA256 bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6
MD5 8e39ff336837058f8fd5d3b0c10afd29
SHA1 ae45fb2c42e7f9648c94e24c9ba9ca8c8f15d054
SHA512 df4dcd85f895a771db4913b70b0e33e46b6de2716de234e97e43709b7d11a5758fbde027d4692ba3760a462fe1ee55559ede1d9fe656333e20555f5cc1d60727
SSDEEP 3072:PDCVqSwKKzaLduxEnUHoqof/qKVp2w5OdQpC0B+QSThqEWRt9PKgrlvHsiUN05Ru:PD4TbQgqkpCQxB+7Ig
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6

File Explorer

bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6

.exe 218KB

bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6

IMPHASH c62d0f69a314bf7274d6af30d5c4bbbb
SHA256 bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6
MD5 8e39ff336837058f8fd5d3b0c10afd29
SHA1 ae45fb2c42e7f9648c94e24c9ba9ca8c8f15d054
SHA512 df4dcd85f895a771db4913b70b0e33e46b6de2716de234e97e43709b7d11a5758fbde027d4692ba3760a462fe1ee55559ede1d9fe656333e20555f5cc1d60727
SSDEEP 3072:PDCVqSwKKzaLduxEnUHoqof/qKVp2w5OdQpC0B+QSThqEWRt9PKgrlvHsiUN05Ru:PD4TbQgqkpCQxB+7Ig
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6

kernel32

msvcrt

generic

Sharing

General

Malware Config

Signatures

File Explorer

bab11a50b9660a9854f14db5da15919787d8ba7ae94915a5414f95a3a262bcc6

kernel32

msvcrt

generic