CREDITED PAY SLIP[.]rar | Triage

Sharing

General

Target

CREDITED PAY SLIP.rar
Size

694KB
MD5

f422a55cdba9f3fbfff923d527f41cdc
SHA1

2c5089b871c2a19f837bacc56f4c437b5fab3e22
SHA256

9fc4f26a0088a9b28d0a5a4c83d4cee2ee9aeeafa3bd465a10a3c2a6d54b781a
SHA512

4d038e51cd88296f29715be44e24a63797da2fd077f74ea853a6cba56c972d62a7e2e625508db9dc0f926528c7017f9a89c40b0384fe483ddfaa1d99f8e870b0
SSDEEP

12288:FXT0Zr3nJeNLUmcZt5+g2PayapZoYxObipIgeKD/iCEz87syIlGtvCa7zi:dT+LnJeN705+g2PYpiWppjRgEpI897zi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0tMUNlnakQsCKNd.exe

Files

CREDITED PAY SLIP.rar
.rar
0tMUNlnakQsCKNd.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 830KB - Virtual size: 830KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ