Overview
overview
3Static
static
3button-in-...on.bat
windows7-x64
1button-in-...on.bat
windows10-2004-x64
1button-in-...le.bat
windows7-x64
1button-in-...le.bat
windows10-2004-x64
1button-in-...ut.exe
windows7-x64
1button-in-...ut.exe
windows10-2004-x64
1button-in-...ox.exe
windows7-x64
1button-in-...ox.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
button-in-batch-file-main/Button.bat
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
button-in-batch-file-main/Button.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
button-in-batch-file-main/Example.bat
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
button-in-batch-file-main/Example.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
button-in-batch-file-main/GetInput.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
button-in-batch-file-main/GetInput.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
button-in-batch-file-main/batbox.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
button-in-batch-file-main/batbox.exe
Resource
win10v2004-20230915-en
General
-
Target
button-in-batch-file-main.zip
-
Size
4KB
-
MD5
ca7260f0cc200f9ffa6e75d9dcaa11cf
-
SHA1
819fbda15e526247136211be52715940ff721b34
-
SHA256
312f60b66fdaa2e684144e9c7738a2203b3653a6cb27355b5c70b65b86a7f3d6
-
SHA512
356822af61060110b4d9f7a89de832c371da7b33d9f09203bae7dbcc704a0d82f25c61556aa5f298b038711997552c3634fae5f47aba9da9fbd218871c8828a0
-
SSDEEP
96:ouf6SXvZa0TVECxvRaYEUQ7syXVh3ZbKuUC9+OJF+G0fWmopgdK:oufu0RECxJ4llhp+lC9nJF30fWmopgU
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/button-in-batch-file-main/GetInput.exe unpack001/button-in-batch-file-main/batbox.exe
Files
-
button-in-batch-file-main.zip.zip
-
button-in-batch-file-main/Button.bat.bat .vbs
-
button-in-batch-file-main/Example.bat
-
button-in-batch-file-main/GetInput.exe.exe windows:4 windows x86
efb2c106be6c2bc8cffe4984e09370b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FillConsoleOutputAttribute
GetConsoleMode
GetStdHandle
ReadConsoleInputA
ReadConsoleOutputAttribute
SetConsoleMode
WaitForSingleObject
GetCommandLineA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
button-in-batch-file-main/README.md
-
button-in-batch-file-main/batbox.exe.exe windows:1 windows x86
bc4825139fcd36c5ca69088280f1d5c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
printf
_getch
__getmainargs
exit
_kbhit
strtol
kernel32
GetStdHandle
SetConsoleMode
SetConsoleTextAttribute
SetConsoleCursorPosition
ReadConsoleInputA
Sleep
SetConsoleCursorInfo
GetConsoleCursorInfo
GetConsoleWindow
user32
ShowWindow
Sections
.flat Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE