TNT Original Invoice[.]bat[.]exe | Triage

Sharing

General

Target

TNT Original Invoice.bat.exe
Size

667KB
MD5

c2853410ef7622a1c4011379555aeb6e
SHA1

69221ad76e4cd869ff6483ab44d1248bb0b0a9fa
SHA256

605ccfa010e2d945154cfb395a6a4855d00b710f447dbad889eb0415bb9710af
SHA512

bcaee778eb208cf5c97c8c32f6f3427b7991b241900dff060b1871cff04b0412d8ca9e7d56ff20cdfec17325881af6c72daa56d2eb06c9efd5caf580ccfe484c
SSDEEP

12288:BrueWFm+L0gJVGt0YKvh+PoiXPshhr/+2snkfh9r/tbfqo4uDUkas8b:kRFm+LX8Kv+o0mhrW2MkfDlfqBuB8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TNT Original Invoice.bat.exe

Files

TNT Original Invoice.bat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ