5F2B0CC32EFEB43C36AA3B4D87324F243383F00BC591674C231E5B3188DE8B71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5F2B0CC32EFEB43C36AA3B4D87324F243383F00BC591674C231E5B3188DE8B71
Size

384KB
MD5

0c05703a491489ec99fa4e4fd428a08e
SHA1

e3526d23d0dd181cd2e56e878c7051934c57cb55
SHA256

5f2b0cc32efeb43c36aa3b4d87324f243383f00bc591674c231e5b3188de8b71
SHA512

4e84248a8023aeaf7732be3b04543cfa24a393b166d1d0404000c551ac3c4d36daeaf6f125d74f29e4c7c660b6810a0c06d5345881ff3ccbf9d4a8f35c3f11e3
SSDEEP

3072:SKCV2Cn1a0hz6D2fmCo/PQIVaSXhOkNwUN5AHtyQawstu+qBUoNtC02EoAwBS9KH:E1a0U2fALhOix5AHtyol6JE4S9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EFT_Deposit_9857849statement.exe

Files

5F2B0CC32EFEB43C36AA3B4D87324F243383F00BC591674C231E5B3188DE8B71
.iso
EFT_Deposit_9857849statement.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ