Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order-Scan 10030022266 - PI.bat.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Purchase Order-Scan 10030022266 - PI.bat.exe
Resource
win10v2004-20231020-en
General
-
Target
download.gz
-
Size
370KB
-
MD5
e8cf3b3bfe27deac116f0b65f2d0dba6
-
SHA1
de1e82844b6bf4dbfd26c1c90c2e9fc1e6d69e0e
-
SHA256
f07f7ca5f1f038586828f09a50f82d7b2d4e84a2bef895bc152c307a702f4980
-
SHA512
7e215fd92e78b152a9fd477c29eb4ab04a18844f03dfae7fbc27a0c54dd430d28eaaa3b77e7560a2de36379b8aeca800d1420db8f64808574cd2a5ede2b3ba06
-
SSDEEP
6144:3rJYjPfu7ytOsP1eKD0P+UcYUk6+7V+ETcaZ6fx48yPC6SN1:tYjPfptOkeKD0P+dkD7gEix48W2n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order-Scan 10030022266 - PI.bat.exe
Files
-
download.gz.gz
-
Purchase Order-Scan 10030022266 - PI.bat.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ