Pagamento BPER Banca _Swift_copy[.]bat | Triage

Sharing

General

Target

Pagamento BPER Banca _Swift_copy.bat
Size

18KB
MD5

c5338abfdd743b2d233198612c70437f
SHA1

eaf6bcc0f25b65400fe7558ec8113ecc0052134f
SHA256

9aea4a9e347ff1400444bd839ba7a573a5836d9133b5f2986662d847bdeeb70f
SHA512

b27a0236d8cded26ba2ed3b73f0c700a3ae4444588611ac63383d68b23629e7c627bfb6c772aa990ce2230d0dfa42bfef03e9d030fc76e25848b2da9d6759b72
SSDEEP

384:V5nHmivmk4mm5K89C5KRBc5TgUBP9yYRwP:V5HHvp4fKx51GO1yYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Pagamento BPER Banca _Swift_copy.bat

Files

Pagamento BPER Banca _Swift_copy.bat
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ