Pending Remittance Accepted[.]uue | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Pending Remittance Accepted.uue
Size

69KB
MD5

3566811245123e46eced9e537dfe62f4
SHA1

ff9f09e67c0b689f4afa2604f2249035391eb600
SHA256

151fff6f30d18ed8e3e6d96e16245715f592e535e2be1dc356d8a2bdb0f774e4
SHA512

27bf890b27dd162bac14c32881bac6ce3ebbc782bf28157fe5155674a0338d1b0c8f117fd38a69256adcbcda1cd71bac36abc5b098eaac85fff26e903a249447
SSDEEP

1536:TQjkL7UaiDEMfDR78HB83cn4D/PadOlo+qtrvjmDL4wOvefy:0AMa6Ecd78hfnE/PmOlOtWXdOvefy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pending Remittance Accepted.exe

Files

Pending Remittance Accepted.uue
.rar
Pending Remittance Accepted.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

`]y
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ