home

bab6.exe

MD5:
bff429379c0e9286f283017b2d8c137b

SHA-1:
90184bb8349832e0cead3d1854625e720c9a4cac

SHA-256:
9b21c514f0c8f584a45781d4a55e1ab2f39ea8a10ddaea266c51109b9c9aac06

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:59:31 AM UTC  (today)

File size:
1.4 MB (1,428,830 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\bab6.exe

File PE Metadata
Compilation timestamp:
5/10/2016 4:02:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.24

CTPH (ssdeep):
24576:b4EEKDwMMXqE4AFdIKxVuq265VT0PEJh/rxWE3h3VuQ5dMtbVK:9MqLGIp6Mtb4

Entry address:
0x14E0

Entry point:
83, EC, 0C, C7, 05, 38, 50, 49, 00, 00, 00, 00, 00, E8, 4E, C1, 00, 00, 83, C4, 0C, E9, 86, FC, FF, FF, 90, 90, 90, 90, 90, 90, 55, 89, E5, 53, 83, EC, 24, 8D, 45, 0C, 89, 45, F4, 8B, 45, F4, 89, 44, 24, 04, 8B, 45, 08, 89, 04, 24, E8, B1, DD, 00, 00, 89, C3, 89, D8, 83, C4, 24, 5B, 5D, C3, 55, 89, E5, 53, 83, EC, 24, 8D, 45, 0C, 89, 45, F4, 8B, 45, F4, 89, 44, 24, 04, 8B, 45, 08, 89, 04, 24, E8, B8, DD, 00, 00, 89, C3, 89, D8, 83, C4, 24, 5B, 5D, C3, 8D, 4C, 24, 04, 83, E4, F0, FF, 71, FC, 55, 89, E5, 51...
 
[+]

Entropy:
5.9986

Code size:
526.5 KB (539,136 bytes)

The file bab6.exe has been seen being distributed by the following URL.

https://drive.google.com/uc?id=0ByBUUGov-B0uNUcza0NhcWhSQlU&export=download

Scan bab6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.