uni[.]bat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

uni.bat
Size

223KB
MD5

978cfcec0611b1c9d1b4c9f59c4b99bc
SHA1

6b2df77e2c71923d11f31a759fc93a0f6b6694e7
SHA256

8cae289c53a37df3ae625823f25e96b11a383bf0202ec07a89744eda06f96409
SHA512

ba510defac0878e706ba9e06271df4c54f37485bced2145583ab8723002b107c52acbe295c6a6ad32efdc7068efaea75153b6d74a9313f20907811fce881e312
SSDEEP

6144:5mOSAIie3aHHWSR75+XnaoX6sUvMHEqm3X/80kl28TkfEjky2ykPPOysynAsI:UOSAI33aHHWSR75+XnaoX6sUvkEqm3X+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
uni.bat

Files

uni.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

f'G^(N
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ