EFT Remittance copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EFT Remittance copy.exe
Size

881KB
MD5

0bea467b249b80de2c6a2ab8880f7c1f
SHA1

a5a1b0d11ec2f2a1de21160bb9c47735231c0326
SHA256

5c8018c014371e3ec6d9fe4c4d6c568f24e21e9e1b64960ecf7a650bd7b9b8b6
SHA512

bc766ead2a97c6bba78a90cde3e84a5051cc956b019ce44d78e8d4c9117aefc88896271ba1430d212fef353652089182ee54eb5689445951829c5cab1228d8b1
SSDEEP

24576:KQ+/3Yrt/t2PYRs6CE3jLMpppdpppppUO9Rs6CE3jLMpppdpppppUO+OgumR36tu:Kp3Yrt/t2PYRs6CE3jLbO9Rs6CE3jLbN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EFT Remittance copy.exe

Files

EFT Remittance copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 878KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ