Transaction_Receipt[.]LZH[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Transaction_Receipt.LZH.rar
Size

446KB
MD5

14167d46ab702d6b50fe1d3c77f8f1f5
SHA1

b4c6fe068b3ad1fd2195f43ffc46cc43a77a4738
SHA256

15e42a2b2e8289d8690f08bb2ec3bd0f56769e7c84e509f1b71c63c329769a4c
SHA512

5e89772191a21793879d2a831aceb2342b3a1f6b3aa7102ed9804e02c582da72aa84116df29d1f85de697ea898bca2fc3d398ccc867b1eafc7322fe230c53d5c
SSDEEP

6144:11rsyT/ZE2opEMgRHXx6y8IlyjbDEY/RV+gj3Mq/kHG6pTmbFLuRJauY7v+tUlOA:b7/22oqMglXgy8iYX53Mq//6sFiKuYFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Transaction_Receipt.exe

Files

Transaction_Receipt.LZH.rar
.rar
Transaction_Receipt.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 833KB - Virtual size: 833KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ