fa3702c2-2703-4346-387b-08db20bd01fd[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa3702c2-2703-4346-387b-08db20bd01fd.gz
Size

426KB
MD5

f00bc9ff5f2d39a7bcce05779da58f6c
SHA1

fe3c4935fa40f573864a6569cbe29ffde274b146
SHA256

86a6eede1411a088ac94bff51997879eea2889a1fa0a662d66d8c984754b720a
SHA512

01925c338fc0c7b56e828111995f76e7c494187cf0e857793893a0dfa141e8f5179a69c580bea3a253ccdfa736f453b0615d9855dff14a36d4ff9de1f8fe49af
SSDEEP

12288:ADRm8/EZIeen56iYl15wQDzH2BuxsiGMCnN1q:ADA8sZLU5u1b+EGBa

Score

1^/10

Malware Config

Signatures

Files

fa3702c2-2703-4346-387b-08db20bd01fd.gz
.gz
sample
.eml
EFT_Deposit_9857849statement.img
.iso
EFT_Deposit_9857849statement.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
email-html-2.txt
email-plain-1.txt