RHP09865678900[.]bat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RHP09865678900.bat.exe
Size

491KB
MD5

8e93ad1cfa6b2fd808734b5ca23d5fc7
SHA1

1f0653235119edd4f4656a2c02944ef74a6dfdc6
SHA256

dd5169cec827931e5cbb3dc58bf4649dacb0951f791a85a6ae0738a1e22dc5a8
SHA512

cef96317417db4ffebeee7f052a4a8490bb1a7e62c113286300ddba2906b6c5b49d273348fe6bb308ac4dbf3a42cf0cc9330487997b750eace9874c2c75d9e6b
SSDEEP

12288:fEydCTc19JsxeHNxdhnEXDz2TEqlwYrOiqo:cqjJyUxdhcqlZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RHP09865678900.bat.exe

Files

RHP09865678900.bat.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 489KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ