Windows[.]bat | Triage

Sharing

General

Target

Windows.bat
Size

165KB
MD5

1b08abd8e580dd1a3d4549f2dfd3c0fc
SHA1

f9c02e53b48ba3afc565657f3d54a8cab2d3290a
SHA256

95634eec246a36f74ccc961b1e86b50c5dff0e12a31108bdd1d1bd474a681ef5
SHA512

7513639c0f38aaad7445b46ebbe7c66ebee5a06e687e2b2fbfb3ef9c8ed1a9f17db8b7439d683157c9a3e0b20e25b1c153b48d650fcf0d7d70b90e0fbdeecf0c
SSDEEP

1536:ULhu8SsRH4jJtvT2/7kbnbI/UZbWFb+cJ4mKaskLHfnjVJFM1/L3fG:IS9tvTTrbI/U8bjVKa/rVJFm6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows.bat

Files

Windows.bat
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ