Static task
static1
Behavioral task
behavioral1
Sample
run.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
run.exe
Resource
win10v2004-20240226-en
General
-
Target
run.bat
-
Size
11.7MB
-
MD5
b8b5c2a90293fb74a1816357d438eb2a
-
SHA1
227c0540f6afa6ba28b4cd7edbe572b25d704c3c
-
SHA256
5d59885a58778cbebfcd5ea31118f52f1a3229b5c9e5ace83870753beffe6c1d
-
SHA512
c5b7d0e24c3be4abb4b8ac8d214ace8f369604a85b84a18f61e597341e3ea6fdfe91131a0c17c55bec38d81747d3ed5abbbae1ac17a11ae9d4cd955227d5b5a6
-
SSDEEP
196608:yL+okNgjHWnYW9MkST5qFwecZM5foJ/zinW5FA/mSR2y+Co0DmHaWGpOezE4Wv:yLFinQTUFyZMOJ/+WsuSR2y+d0DmHara
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource run.bat
Files
-
run.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11.7MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ