BANK RECEIPT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BANK RECEIPT.exe
Size

858KB
MD5

5d614c684e28b641cb1baa235b93a607
SHA1

897be2a7d89a460e785eb8d709fc5af5e063e489
SHA256

c5f256689f11369ee00414214fef56fb6eb22bb623835d676a02dfb561791200
SHA512

8ba03f06694bd7668f6c7cea090e00823927a66c99d8f06ce2b40f213a03420430f152e2f32e115d2266e12221d7b5b0448ab8eb25cc2b26a8f513f424c5ab96
SSDEEP

12288:c9jojIkCpYMQ6wWTu8plpNota4QMKBH1a++xaP1OJTHZoLa8TQxxdmtBhGzpgVe:c9RkpMHNplpwabHP+xsOh5gLkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BANK RECEIPT.exe

Files

BANK RECEIPT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 851KB - Virtual size: 851KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ