Payment confirmation HA-9VVNL7[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment confirmation HA-9VVNL7.rar
Size

1.0MB
MD5

2e33427db3e3f85a33a157401d2f7a5a
SHA1

8e3041ba612d4d4641911b0d4cf287fc5b07b729
SHA256

dffe351852b4d59a792f31ab4369c339f7ba61936453b6f9b9724adf5f4a42ce
SHA512

8512f9c77f8556121f6818ef1480f3ce3d7bee86ff63c54dd7d3cbc3d00c26bdec9b5535ef6943a7424141941faea4ce25becce003fce58ab436cc5fa066f111
SSDEEP

24576:9SWrMz8C3kJ+VnkaJ56TxIN84Mm/3vfJM5GJf:9S0o8YXMFIN84X3vfu5Wf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment confirmation HA-9VVNL7.exe

Files

Payment confirmation HA-9VVNL7.rar
.rar
Payment confirmation HA-9VVNL7.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 561KB - Virtual size: 561KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ