57b8a315158f50e6dcee95886d9316a02aa16fd7bff5f9a6f47411e02ffc0848 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57b8a315158f50e6dcee95886d9316a02aa16fd7bff5f9a6f47411e02ffc0848
Size

303KB
MD5

734e6db5494b071d81c5ff98c3a74e4e
SHA1

e600bc8bd5c166c631af17ebb6248c658c76f2e9
SHA256

57b8a315158f50e6dcee95886d9316a02aa16fd7bff5f9a6f47411e02ffc0848
SHA512

343ff444362ec755d7608fe3368230862eb65ce1caf4d344a336db8333c9c3d9aa32a4ee2fdf2d227cc526f0fe2fe822e179b9e9f1689b2786daeff325e28e06
SSDEEP

6144:pw/nyUNKwkKppKgxcLXGJYHEGo3v30+65ofzW/iz/q3SOenAcJf342:GyOKappKgxk3Hy3vCWfzcW/q35eFJf3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bank report.exe

Files

57b8a315158f50e6dcee95886d9316a02aa16fd7bff5f9a6f47411e02ffc0848
.rar
bank report.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 847KB - Virtual size: 847KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ