BatCodeCheck[.]exe | Triage

Sharing

General

Target

BatCodeCheck.exe
Size

89KB
MD5

eeebf1c20c3929303f90e083367c0c2d
SHA1

4dd35fef920307d3ed37e9da816eb8b9add8fa58
SHA256

057b1d4892ce35fae9aa5a9060b443fbc2a140810424b5bac02650db02362413
SHA512

13fa490f0ff3749f3926df78287737492a724f89916d6d9d6bb38eb4417c10642bd56ac954226ff40e1bf93beb67fc67efa5a68296be5e94cdda683b3f9e5812
SSDEEP

1536:qToQTffTuA9OLaCiNYkF3cMG2/rdhXM4StGv611F6lnS0jjX:ATfiAFCrkF3BdhXPoGv611F6ZS0jjX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BatCodeCheck.exe

Files

BatCodeCheck.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Sources\VisualStudio\BatCodeCheck\BatCodeCheck\obj\Release\BatCodeCheck.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ