fa691ae6dea9e662a3a5d2f7405ce9ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa691ae6dea9e662a3a5d2f7405ce9ed
Size

592KB
MD5

fa691ae6dea9e662a3a5d2f7405ce9ed
SHA1

69e8b7c003b6ad9a85f09c7bc5ebf0bcc6dd6f34
SHA256

8330231d9d958fedcb087d58b5fa44f01f9b265f6cddb3e2d7b42d71b3a86aad
SHA512

0173e1996458d3ce262d194875653cbd667727f2fa3d52faae907d18158e046bb4ecf9d4fd9e7a01b29bb382ac25140d6581a089f2d64bd172976a7a970ec165
SSDEEP

12288:e/h64KN7sYqx7/iXoVMPkcZN5PczdzB10J0C7yucoIlOdHleW:mh6HsYqxJVZGNdUzB10JD7yuTP

Score

1^/10

Malware Config

Signatures

N/A. 1 IoCs

N/A.

resource	yara_rule
sample	dropper_html

Files

fa691ae6dea9e662a3a5d2f7405ce9ed
.eml
- http://www.transcarsolutions.com/
RE Invoice- [PAID] 9192022 bank slip.zip
.zip
RE Invoice- [PAID] 9192022 bank slip.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html