11102026_1024_10102026_BABS2601009B RFQ[.]exe[.]rar

General

Target
11102026_1024_10102026_BABS2601009B RFQ.exe.rar
Size 757KB
Sample261011-mffepszvay
SHA256 e989c1aaea5274eb7953c82c3b669635a7510c3c158428162adb7f132cc01c0a
MD5 a7c4a741180a6b499f530e4ff72c1eff
SHA1 5b1322f3bfaf25b002696b5e8451dbeda2105c23
SHA512 ed80a8968fb6652222fd26a8b5bc6b0dbb8b6e53feaf360784fd1f2faa21c86d546dee03e268c6cf33b4553d5c0287b2b17bab61f4ef06091d66830e7571b359
SSDEEP 12288:YSRDJ3YpSVBMr7ZAGW/zuF2Mqno9JWbWQDfjISaz+wh4JdTYCZ9FFn9DNIVDSb:YCJIS7+ZG/zuFmnXWQAFz+wInZ9RIVC
TLSH
T143F42309F7CB3453DC82262BC6BC66B65663A37621050BCF64A3E0E76EBFC48D636154
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BABS2601009B RFQ.exe

File Explorer

11102026_1024_10102026_BABS2601009B RFQ.exe.rar

.rar 757KB
BABS2601009B RFQ.exe

.exe 944KB

11102026_1024_10102026_BABS2601009B RFQ.exe.rar

SHA256 e989c1aaea5274eb7953c82c3b669635a7510c3c158428162adb7f132cc01c0a
MD5 a7c4a741180a6b499f530e4ff72c1eff
SHA1 5b1322f3bfaf25b002696b5e8451dbeda2105c23
SHA512 ed80a8968fb6652222fd26a8b5bc6b0dbb8b6e53feaf360784fd1f2faa21c86d546dee03e268c6cf33b4553d5c0287b2b17bab61f4ef06091d66830e7571b359
SSDEEP 12288:YSRDJ3YpSVBMr7ZAGW/zuF2Mqno9JWbWQDfjISaz+wh4JdTYCZ9FFn9DNIVDSb:YCJIS7+ZG/zuFmnXWQAFz+wInZ9RIVC
TLSH
T143F42309F7CB3453DC82262BC6BC66B65663A37621050BCF64A3E0E76EBFC48D636154
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

BABS2601009B RFQ.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 50efab02b097ee58dbc2251daea7d588233d13c6207e8ba7022172ed9c654eb1
MD5 da9f69a4842f6eb4fb76512d98db798f
SHA1 e03a1af0cda7a47a1c509f809fdad7d0968c0647
SHA512 a07fa9375ab366b1d42f03b062c5211ca41b440b10e25c5c40e82ba4d89cc8ca5c4cfd01b33db04d27855a3883ea9cfecb36622b388173eb981ae3859067777c
SSDEEP 12288:fnoIh0i6SZzpX8zm+GaGQ37YOYlQ6ts51RQ50ATiDiDv52h7/Ch7F5axe1cmcohT:fngKX8LGa133xSugJAh7/Cn5p1cmco
TLSH
T1E925BE9A3ADADC2AF0720F70C5A1F2F243B09E41EB21D257CAD57DD73931B81468635A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

966254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

11102026_1024_10102026_BABS2601009B RFQ.exe.rar

BABS2601009B RFQ.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

11102026_1024_10102026_BABS2601009B RFQ.exe.rar

BABS2601009B RFQ.exe

mscoree

dotnet