Unicredit__Pagamento[.]pdf[.]bat[.]exe | Triage

Sharing

General

Target

Unicredit__Pagamento.pdf.bat.exe
Size

819KB
MD5

9d56bd80b1c4c8849d290755e90f99cd
SHA1

e425c28f12e3b9f14957c713f431d0af6c337e11
SHA256

71deef76733c0d00e1d155a32d3a9306755745406beb9d1dcd46508bc7ed9841
SHA512

e624df0d1e77d6be023c4752297be2df921e375951e636322b6a11dfaf4556f8208ce4d7f0c4ef404d70157b67eb10ff415ca317603e11cda38e2a3c7ea3b9f4
SSDEEP

12288:5PgzOQ2fmLZL41rjVZL3ANOZNMMizbXrnzYLQgRyGh0ceOv:5Pi2fmLZM53AQZ/inbzYLQgR/h0ce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Unicredit__Pagamento.pdf.bat.exe

Files

Unicredit__Pagamento.pdf.bat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 817KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ