Attachment0[.]bat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Attachment0.bat
Size

682KB
MD5

21b421668acace4ae38801c0070b932b
SHA1

b7611f16dcde081498d6b3ef01594dc3ec50a10c
SHA256

27ff7449d81cf9cefa33739b0ea8cfad43dcede0e7cc1d9cca545ff28180c3e0
SHA512

e63829fff4c267f8cc03fbade115d35fbbb83b62cdf60780c6ce91e19d203f19d766162254778d8c805fd2105ec1b7baf8052ee83f803cf4f5cbf71d3ee0189c
SSDEEP

12288:v5IB1oVeonRb+9N5KTMr71sRb08vBYR0b7C5320M3cIGEOsPJElU4Q8VXmAC2q26:v5qo5YeM3SRQ8Nb7Cx2dcILJqlU4Q8Vo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Attachment0.bat

Files

Attachment0.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dDis.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ