Behavioral task
behavioral1
Sample
Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/Cardiology/Spacelabs Softwares/Bat_To_Exe_Converter/Bat_To_Exe_Converter.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/Cardiology/Spacelabs Softwares/Bat_To_Exe_Converter/Bat_To_Exe_Converter.exe
Resource
win10v2004-20230703-en
General
-
Target
Bat_To_Exe_Converter.exe
-
Size
391KB
-
MD5
aea22deb2c04f78ae06befe97b070fa4
-
SHA1
cbf74bf9df36cdf58ed2b60c901fffc97faa5a4a
-
SHA256
1f4b04aedb2b7c6c27d9c76203d096e658b1d847d8cd504ef9b7eabe24826a3a
-
SHA512
b7c3341fb3cdb7c41b0d654d4f2cb9ebe50d088ac5c843e04993de882003d4f21a014932e65d1f5d850abfc1faa8cc36a796f66ddd113d74934d43880ee284df
-
SSDEEP
6144:x9HQTDX9ZPADizSEhr+FUOH8L5zqWg5sVC6DX76Hxx/GJGs0tTQuHTx2:x9QDX9ZPlb8FiL5jg/6DrA/ds0qut2
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/Cardiology/Spacelabs Softwares/Bat_To_Exe_Converter/Bat_To_Exe_Converter.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/Cardiology/Spacelabs Softwares/Bat_To_Exe_Converter/Bat_To_Exe_Converter.exe
Files
-
Bat_To_Exe_Converter.exe.zip
Password: S@ndb0x!2023@@
-
Device/HarddiskVolume8/LAPTOP FORMAT/D DRIVE/Cardiology/Spacelabs Softwares/Bat_To_Exe_Converter/Bat_To_Exe_Converter.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
manifest.json