Malware Maker[.]bat

General

Target
Malware Maker.bat
Size 772KB
Sample260621-pellfad12w
SHA256 edfde487564159d3cc0c89e9515609a0c52e6835392e2026a8afe63215e33172
MD5 b526f66087db1912b6d52223ce000736
SHA1 6c74f4ce7851e8ed57f08a6eb78d407b6b6da409
SHA512 5c60828828722dca35abefcbe4b5d1336e042728db043bdd9d0f1b0fd141a1b7534564a34cf34ede4bef842f1312a0bd7ebcfbd2c343efc50ad3921b851b49b9
SSDEEP 24576:Bhxo1DdO6fXaXS6TsG8I1adr0bzt0DduxYC:Dxo1JOMxsl8I1ax0PAsxYC
TLSH
T1CAF42300B944D9AF87F2F1508AB9F718865E7382F1E93E878A985FE6F14770B5385930
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ cls @echo off set t=%temp%/x.exe extrac32 %0 %t% %t% del %t% exit

File Explorer

Malware Maker.bat

.cab .vbs 772KB
cls @echo off set t=%temp%/x.exe extrac32 %0 %t% %t% del %t% exit

.exe 1.8MB

Malware Maker.bat

SHA256 edfde487564159d3cc0c89e9515609a0c52e6835392e2026a8afe63215e33172
MD5 b526f66087db1912b6d52223ce000736
SHA1 6c74f4ce7851e8ed57f08a6eb78d407b6b6da409
SHA512 5c60828828722dca35abefcbe4b5d1336e042728db043bdd9d0f1b0fd141a1b7534564a34cf34ede4bef842f1312a0bd7ebcfbd2c343efc50ad3921b851b49b9
SSDEEP 24576:Bhxo1DdO6fXaXS6TsG8I1adr0bzt0DduxYC:Dxo1JOMxsl8I1ax0PAsxYC
TLSH
T1CAF42300B944D9AF87F2F1508AB9F718865E7382F1E93E878A985FE6F14770B5385930
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

cls @echo off set t=%temp%/x.exe extrac32 %0 %t% %t% del %t% exit

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 bd9ca001c47299493a5dd6f2d8442f867e365a98a63620ffeec1f179e3e9d852
MD5 3db813602f03fec07017687110f9b6af
SHA1 f05104f5a55557c8e23a538d754ae7a981b4a0a9
SHA512 c86976c187c878a1a5fb9b0586e81915501258cf5c415d8134709e22bfaa4974462047600b9bc91db6548fcf85bb7c935483108ebaa737965bea01428bc3f970
SSDEEP 24576:unobDUs6fcoII88I72V006r3Y3j7UKbjZ7x+CUNv7:unobYs/oIhg6UvL39srV
TLSH
T1B4955B02B6C2DA66C0196231CCC3D320FA72F4A46B3693573BCC57BF2971B91BE85656
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1442912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Malware Maker.bat

cls @echo off set t=%temp%/x.exe extrac32 %0 %t% %t% del %t% exit

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Malware Maker.bat

cls @echo off set t=%temp%/x.exe extrac32 %0 %t% %t% del %t% exit

mscoree

dotnet