Behavioral task
behavioral1
Sample
Bat_To_Exe_Converter.exe
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
help.chm
Resource
win11-20240709-en
General
-
Target
Bat_To_Exe_Converter (1).zip
-
Size
421KB
-
MD5
dfe38f2316f5a5a8d15c5152a5534512
-
SHA1
6d32ac7d34ed6376c503f8b7963b9a4096507b2a
-
SHA256
40e9ddb5d36dcf94a9f05d0785cb0d94f3da7704a0f38851567ca86b5bf6b939
-
SHA512
ba85bf356c5685d770369a12cca0ea570d18ac804686896b1f7925965b29650a6928d690a3b4f9563c3aa4999dc0416f9c23a1a78049a5003c6dffcc4d5a005d
-
SSDEEP
12288:3PhDWr/DwSdzFZki5iC7Zk7/eh5j/tzklukSvxSOdu7:3tq/DOClAkjm4kSI7
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Bat_To_Exe_Converter.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bat_To_Exe_Converter.exe
Files
-
Bat_To_Exe_Converter (1).zip.zip
Password: kevinek
-
Bat_To_Exe_Converter.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 548KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
help.chm.chm