bateria[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bateria.exe
Size

466KB
MD5

22871ce256b5ecd7a4c66479ace924d9
SHA1

f8721b6fcea30a28cc948ca2321fee53fda6e9ce
SHA256

a59a59015d834ab2b44d570fb29ef8c35ab91e1b363501f8fb8b68bab5c3ffec
SHA512

47b14f4ae843212f4805292cf6bc43b99707e9fd453a8c8d3f8ab7dc4fae95c5a981f6727d08e95d54ef0a9d109936a591627a7d77ea30d5969bdb2541e233fd
SSDEEP

12288:W/+SBF8W2+yiKBIpxFxlmqAFdtRsIRpQ:WGm8wyil9POTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bateria.exe

Files

bateria.exe
.exe windows x86

Password: infected?

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ