981BD9727C6B63C309A6CD2466E556D3DFD97038894DA5AA0CC9204400B679F8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

981BD9727C6B63C309A6CD2466E556D3DFD97038894DA5AA0CC9204400B679F8
Size

906KB
MD5

c80140147a00a0e8a2bbef1e85483b4b
SHA1

aef31ac3d7adb3a6aa5b98ebc047d9e28e217b9e
SHA256

981bd9727c6b63c309a6cd2466e556d3dfd97038894da5aa0cc9204400b679f8
SHA512

78a33d204ffff8477cb41277f13f6ac85e8ff38aa63c741dd54af982788bae6efbcda075bbf1dde923fee37dd3099a0aa0b085cc56cf10219e716f7d5c5ca665
SSDEEP

24576:13T+V/D71pTU5Irnl6vXLIzN6ghdcV7ohrw2P:Bi/D71xUOr8vch6ghe6hrwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REMITTANCE SWIFT MESSAGE - MT103.exe

Files

981BD9727C6B63C309A6CD2466E556D3DFD97038894DA5AA0CC9204400B679F8
.gz
REMITTANCE SWIFT MESSAGE - MT103.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ