run_script[.]bat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

run_script.bat
Size

8.2MB
MD5

12fdfd25db7a11a7721ee29facbab13b
SHA1

02923e05b8cc72384506a21cafcc2fb453303272
SHA256

11d582167ba6dbee8d7c518c4593d6ddcb3d7b636af682e3a69ed12812e1abbf
SHA512

e65ef22c1466b709c93c6bcae0484779fa108a3c2acfe52eaa47a7bd9519318c1aef846ea0385d285ce7dea508adee9255507cd1f3402afd728c559904d5090c
SSDEEP

196608:AGjPXuWrpTomNyydqBoQs8GtbTqPiqIWe38y568vSuC:AGrXucZomNyyYoQs8GdozIr3p68J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
run_script.bat

Files

run_script.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ