PO# BAG-012924-1[.]bat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO# BAG-012924-1.bat.exe
Size

697KB
MD5

e73fe4130716b7aeaedf3c89edd2a5a1
SHA1

e3bb7d4c19f0d66012fcd34bd74c0b510d192f80
SHA256

2357488a52b209f9969123287d029dcf7722f2df9bceeda9582da6af0b17abba
SHA512

e0d716a85afa8bbf4b50168515cc678792bddd402820170e1da4638468e63e391ec18d10b07d099f43177ad1b42783749718491427f3b342e930f87335861d19
SSDEEP

12288:slTKGZrhBGHsHZ4GAd2FzTqBe6pzpIJds98udvjFCtOWg:WYuZ4GAMFOeG1MLkrFh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO# BAG-012924-1.bat.exe

Files

PO# BAG-012924-1.bat.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ