bank_statement[.]scr[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

bank_statement.scr.exe
Size

37.0MB
MD5

61e6735126b6504424d090ac796f8a49
SHA1

7e8838d573b193beedfa12ff74e1e4933944587a
SHA256

c8e45719240f875784086abcc66cdbf68a102c1d3d5edabb0c7da44516621e51
SHA512

b24367cca3405aed1f55517242b4680d94cc149ba8bc112af5eb37ba2c86e873a11b7ee117138a0ffc1597e6e175d2d1f9db0c79188cb9cbc5d2cfb5edf3ed9c
SSDEEP

393216:NS3GX6iThaMcP5L56QHbe/klf3FWpis6n93CnVspY9rw20amy/dtzEvQ4iD6t+t2:a3iTkFVBn9Tpkw3dUzMri2ty7I9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bank_statement.scr.exe

Files

bank_statement.scr.exe
.exe windows x64

22a71214a0c9214caa6b4dfa0b409cb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

GetSystemMetrics

kernel32

FindResourceW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

CryptCreateHash

shell32

ShellExecuteExW

ole32

CoInitializeEx

crypt32

CryptDecodeObjectEx

ws2_32

WSAWaitForMultipleEvents

bcrypt

BCryptGenRandom

oleaut32

SysStringLen

Sections

.text
Size: - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xim80
Size: - Virtual size: 22.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xim81
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xim82
Size: 36.9MB - Virtual size: 36.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22a71214a0c9214caa6b4dfa0b409cb5

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

shell32

ole32

crypt32

ws2_32

bcrypt

oleaut32

Sections

.text Size: - Virtual size: 638KB

.rdata Size: - Virtual size: 180KB

.data Size: - Virtual size: 10KB

.pdata Size: - Virtual size: 22KB

_RDATA Size: - Virtual size: 348B

.xim80 Size: - Virtual size: 22.4MB

.xim81 Size: 4KB - Virtual size: 3KB

.xim82 Size: 36.9MB - Virtual size: 36.9MB

.reloc Size: 512B - Virtual size: 60B

.rsrc Size: 49KB - Virtual size: 49KB

.text
Size: - Virtual size: 638KB

.rdata
Size: - Virtual size: 180KB

.data
Size: - Virtual size: 10KB

.pdata
Size: - Virtual size: 22KB

_RDATA
Size: - Virtual size: 348B

.xim80
Size: - Virtual size: 22.4MB

.xim81
Size: 4KB - Virtual size: 3KB

.xim82
Size: 36.9MB - Virtual size: 36.9MB

.reloc
Size: 512B - Virtual size: 60B

.rsrc
Size: 49KB - Virtual size: 49KB