BANK FUNDED SLIP COPY[.]rar | Triage

Sharing

General

Target

BANK FUNDED SLIP COPY.rar
Size

651KB
MD5

042938fb3342cf83d4336ed534f5aa92
SHA1

38a465a7ff3eb4651f534e42bab25634666ef0ae
SHA256

d02f17228f28187d3a63ea2f68df1641e0136f5225fa49211a8ff8a5340a4744
SHA512

b90df2704d6c27578892886e3d77d149b8a3c090957f0ae64519133b68645279974f8486ddb9313460b168958f9d19632653196c63ac5bbafed339fd50bea6d8
SSDEEP

12288:t6REIGWDcLSikLt0FFFG70eeJ0AiLIPD9E9WBfMtwNvJK+s7lt+SzWYYG:7I4u/LuFkAjJ0pyzfMtwZ1SzfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BANK FUNDED SLIP COPY.exe

Files

BANK FUNDED SLIP COPY.rar
.rar
BANK FUNDED SLIP COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ