QUOTATION REQUIRED_Enatel s[.]r[.]l[.][.]bat[.]exe | Triage

Sharing

General

Target

QUOTATION REQUIRED_Enatel s.r.l..bat.exe
Size

926KB
MD5

dac368e84e853adec2a5bb1cd87cd1c6
SHA1

139c10cfa59c1e25039c02671010009de25a2690
SHA256

ece7de25d48e50e93d3d60f600a7676fe24a520916844f6826b4837ac8dd7ebc
SHA512

823336a9f2016c7144d863000606e45b839746163d4f921150c283021dd06c6def082b66660888fdc70141b989f9d01f4332d3d626c030c962453c78977fe9ac
SSDEEP

24576:c8yNK1t4NK1tOqLBPitz9yZJLjsqk488RBAUt6a:rhkLyZJLjs74Bv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QUOTATION REQUIRED_Enatel s.r.l..bat.exe

Files

QUOTATION REQUIRED_Enatel s.r.l..bat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SnHY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 923KB - Virtual size: 923KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ