USD $100,010,00[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

USD $100,010,00.rar
Size

609KB
MD5

545bc12424f7dd4409a71ebc4f10076d
SHA1

81d5baf21e86c7a43c085d45acf36f24e507b2e4
SHA256

666aac9778903731196e876e413fd334bc2bbab5c7411a07f95764b0d965cc8e
SHA512

acc2981507b0bb1480fbe5599a018d825603f6d0be943900b0b821d6d773fbac5654817a1ea4adec21f91bbb1d9279719c8350a8ef75870427782af228349106
SSDEEP

12288:T5D7I5/rWaXaLPSCU3y3dsJLXbIi7eshS2cgf8UncdrH:T5DE5/K6kPluJLXbIi7vS2cgfzn0rH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/USD $100,010,00.exe

Files

USD $100,010,00.rar
.rar
USD $100,010,00.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 645KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ