Statement of Accounts[.]r00[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Statement of Accounts.r00.bin
Size

599KB
MD5

89a5396e1ff59b096539ddbdef9d76f8
SHA1

4315194bd8b4f0fceb8c650b61f0ef35ec136b4e
SHA256

af8ea3391f63a73b7837e03b00ad457846de93a011f1159709d185ad78e5b94b
SHA512

b7bf9b1179ee7eccc7f6c0d33b4edf24035b38150e150ff6c7f50642c4212a00df8398e92797ea6b8aa06baa4f90f2af19e117cd8b460d48dcd3e7e8476aa66f
SSDEEP

12288:dSjbXw4H/Ediv+vkns/Kf+3QF0nzNf1hKA7+XYwWz8m9UphGj1fKr7:IXXw4H/uhv8s/Kf+gF0nz517wJyxpfKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Statement of Accounts.exe

Files

Statement of Accounts.r00.bin
.rar
Statement of Accounts.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 839KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ