Remittance Wire[.]zip | Triage

Sharing

General

Target

Remittance Wire.zip
Size

636KB
MD5

3e5c11eb7fc9a39d8141521d67dcfa1f
SHA1

e78ab130df7eac714ca6a57358cbcd627b5c43f1
SHA256

fdb613bc7b3513e40264ad2bebe7eb17c2960fdf3a525912d714553014b1e5be
SHA512

b16b1944d51552e32d0dfc0fba11e1ebc698e8d711d001220979dca1232096bf079a31681970a7b63ccf6d1aa3bb4cadc93957040fc5847d860190b53e014159
SSDEEP

12288:ggnHmJyQ+626af2K2tiBRZq3cX6mp1xsvxaUefk2rl4E:PGoajbtik37S1xDE2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Remittance Wire.exe

Files

Remittance Wire.zip
.zip
Remittance Wire.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ