Vbmvqmhkpdclmx[.]bat[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Vbmvqmhkpdclmx.bat.zip
Size 374KB
Sample230705-avk8aaaa84
SHA256 a0fd533728e79fcb935720e946bb000b2cb1f214bbf8ac2a4e3fdec0db982c6c
MD5 5bf6f3f0c54e99c6fdfe907936f475e7
SHA1 d5783ce0554a9134ab061f710b5d90754433d855
SHA512 b60208a0111aab24c499b174a268946150e2227eea2600cffd7d6add42b308f6f475ccddf92e7995d5a96457bd7cb58d7b2e8608faad815b4ac54c6d58e99991
SSDEEP 6144:mnr+yMZBc2AjBD3xxJ48vWQkDl8wO23hkug7ZNKg26Nxr6YdfiLmIgo8ojf:PyOBc2A9D3bJpH23huD26NEce8or
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Vbmvqmhkpdclmx.bat

File Explorer

Vbmvqmhkpdclmx.bat.zip

.zip 374KB
Vbmvqmhkpdclmx.bat

.exe 769KB

Vbmvqmhkpdclmx.bat.zip

SHA256 a0fd533728e79fcb935720e946bb000b2cb1f214bbf8ac2a4e3fdec0db982c6c
MD5 5bf6f3f0c54e99c6fdfe907936f475e7
SHA1 d5783ce0554a9134ab061f710b5d90754433d855
SHA512 b60208a0111aab24c499b174a268946150e2227eea2600cffd7d6add42b308f6f475ccddf92e7995d5a96457bd7cb58d7b2e8608faad815b4ac54c6d58e99991
SSDEEP 6144:mnr+yMZBc2AjBD3xxJ48vWQkDl8wO23hkug7ZNKg26Nxr6YdfiLmIgo8ojf:PyOBc2A9D3bJpH23huD26NEce8or
MD5 SHA1 SHA512 SSDEEP

Password

infected

Vbmvqmhkpdclmx.bat

SHA256 d797cc16d0bd29daf5aa902246d6a9103e91d0b3426e1217f309d7da8790352a
MD5 a0057f482a1f3bcbd7f9506294eddd2e
SHA1 226e77bae175f3dad0198b404f38b69882dfcc6d
SHA512 b444b6b428e04fac24333436eab5a6c7bca102b07b2cc61f98a7ccfe4332dbba5adeccc1fb4290c74000772b4928b2c285bbb5236f89916f2fb442324c0e2cac
SSDEEP 12288:arVcM6ZTgLMhrqmjE+7IKzXTycVyaG9UaRCzqA1u9:8VcDZ/hmakwXTyEGDc/1U
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

442940

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

429KB

Virtual Size

428KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

245KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

52B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ