23JS0412-Power Shades wire payment[.]jpg[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23JS0412-Power Shades wire payment.jpg.7z
Size

678KB
MD5

143e5ade7104769bc90d0a4a3999b82f
SHA1

c69844698d59de4fe627f7c4b773eae24b694a74
SHA256

5795aa740cbe8eb85a5a5eb72c76bb67c2a70b787c1b70705378b66512ed2444
SHA512

843305a46c0a0d1458201f279a237b9c2a8a5b090c7f80165958ab830441bfd8156f1cf4e38cd687f13f3d0ba5abb7b3691c6db3d1fa968b1367f0b043522217
SSDEEP

12288:GUdpRGWfswndnRIMVsHQNpWg8hET/YPZlobI1W7u6ziQvqmvhYbY8Z2wkCo:GIzhfLnZbVsHQNp+hOYZ8lusimvWbX0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/23JS0412-Power Shades wire payment.jpg.exe

Files

23JS0412-Power Shades wire payment.jpg.7z
.7z
23JS0412-Power Shades wire payment.jpg.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 923KB - Virtual size: 923KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ