STATEMENT[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

STATEMENT.zip
Size

543KB
MD5

dabfc4e4d8e074ab38a8626c2ba32967
SHA1

f363fc3d8f59305274ab4dc45c6721987a242570
SHA256

8001a7f9b4ee584c8266f1db111b1960444f5207fe227f12462c4bb542498410
SHA512

b5ab5a0d0f7565af085bd7ff3d19dd97e0ba9a41734443d58fd79ce0c091402dc2020e70d56c57c8dfa3a5d18427893052c97ff55235525fa2739c9e3977b27a
SSDEEP

12288:JFHRJ/2DUlpqtwiYOgaBReI3kpKdU7eoUEzoR4jxWYdCmS1uaNELWvCTtqOOBtHi:J7mMpCw3Ogc8z58R4VTUh8cELWvCpJOq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/STATEMENT.exe

Files

STATEMENT.zip
.zip
STATEMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 951KB - Virtual size: 950KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ