Teams[.]bat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Teams.bat
Size

324KB
MD5

e7e55e93ff3872684d2b79927c05f18b
SHA1

3f1fa24d7c444a3f6bc0b9a4ef3b4e61b88ed222
SHA256

d36e3e64a1065f15641278a9bcf20bdd7c39ade0d68bcb3fe774d65ca45b2cdc
SHA512

a8b61a9d54d9b4971857935492640c731b1522fa08fdcae575b7a1dc360882850b8e20f5e9f90c7e2b2952f315c63dc9839182863417023fa422c85a0df9aa5f
SSDEEP

3072:wiVoGteHxol/lP6+tUr3xRxrxxxwxcxTmQmy3hoktbps9vXmCo2id9xxMxx+xxX9:XUFx/IC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Teams.bat

Files

Teams.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\HYPER\Desktop\مشروع php\سيرفر-php - USB\sendpicb64\obj\Debug\PDF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ