Solicitaodecotao[.]bat[.]exe | Triage

Sharing

General

Target

Solicitaodecotao.bat.exe
Size

820KB
MD5

9d69f27b49d325ccb989a8fa33bf0053
SHA1

d0930220daced19a0000a3971e5f17a1192d1f1d
SHA256

731523e50d68d20fb75e234c107ecbb8e39f2d7115cc1795e73eca399c548a84
SHA512

f9c318f83cc16681b0c6e67acbff54881a6a8b623e6b5e069ad010d006d3d9d402994db82b6e220441104f41373b54c5fa83fb1924bc93c97f0b6f5cf0dd71da
SSDEEP

12288:8l7YdUrL47qgWLvlgmoPEG9cjquHUdn6+XXlTFQSMeAKFhxZ0xHX2:CEU47IvlgmoPvqjq426A/AKTxZ0hm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Solicitaodecotao.bat.exe

Files

Solicitaodecotao.bat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tuE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 817KB - Virtual size: 817KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ