fa098765456899[.]cmd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa098765456899.cmd.exe
Size

1.2MB
MD5

3dd58f75ad16b66a3c034bae89038393
SHA1

3e60bf43e6e48ff5759e47dc82b81ac47896cbb5
SHA256

7d0094638be40437e64bb472a23d920cde1751b266427028175929b3507bacf5
SHA512

11f63470801bf4101a3efa5735c56a792e62cf8d402d9a45b5e05c5fb3be8ccedd77491141fc00d13b8b0aa04d8436d9b1ed20cfc0f6cf2595a9ee21eaf9d679
SSDEEP

24576:9AtD/61sJhHKLe5MrVUgkiu1agdEO9kTu3VRQX0EN:i6SHEusuIgdHSTulRQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa098765456899.cmd.exe

Files

fa098765456899.cmd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ