Remittance Copy[.]exe | Triage

Sharing

General

Target

Remittance Copy.exe
Size

679KB
MD5

affce132a27adf2d4a2ee5c468cb32c5
SHA1

b74fc8146da6a80b7c3f717900825783d419c31a
SHA256

bc7cedbf17f2a3b0cceaf8fbeab3a8a38953d1b64b17d89de74bec0c380516f2
SHA512

680c71309cd6b1b4261b74fb0486731b9ce227371bddd62b5ee05dfd5f9b02a8a491d2004dbc96eca867d85902515a8b13153a8df66c6051da8eb15024d4ca88
SSDEEP

12288:okKvYhp1x0cO7t9qmvm0evA7ucbGh7sNqkH5y9CSte3u:okKvi1x0cOj9v5ih7Z79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Remittance Copy.exe

Files

Remittance Copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 677KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ