Static task
static1
Behavioral task
behavioral1
Sample
BatchPrint.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BatchPrint.exe
Resource
win10v2004-20230220-en
General
-
Target
BatchPrint.exe
-
Size
48KB
-
MD5
84f188a5bc5654b48c957b1627b15651
-
SHA1
30597ef7a9699bc0bd0a4248807ade11cd598d30
-
SHA256
4b95ee9f9b6af99168d968a1e5f1e572a8fc905faf1fab6f8f9afcfee05d4bee
-
SHA512
3333a3c65e6e8d8ec07d82ddeb2b2658ddb5a6451b65c9863dfb4d96b031ec9381d5eb4b9e988e4d9803bac84b41358b1a7d7b5f3fe23e4aadab35ea07524622
-
SSDEEP
768:gawqM6sgb6aldoWGJiJGMpq9zl+cGu2R+3HiH:kZgb6a3oWGJiJglsum+3CH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BatchPrint.exe
Files
-
BatchPrint.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ