09102023_2040_09102023_Receivable Advice_Part 1[.]rar | Triage

Sharing

General

Target

09102023_2040_09102023_Receivable Advice_Part 1.rar
Size

531KB
MD5

24cd903c3a10debb36b079ba774d2124
SHA1

ee0d3d5c82c92f34a59866ab67fe56a982399402
SHA256

1d26b3c8952253722c9e5241aa0e804433d9e1f5d2086995c478ece3d629e559
SHA512

e4fedb9c0d0be986711bf4aa19139e5d2e632a867676133d39093d886017d4b1ac341e28fc795b5e321e8f422b1779db17c8b25cfff10c98a4428c52c501362b
SSDEEP

12288:YHMePSCVrj3tIwxjixvO0AX+WlxCEKayDDrYWnXy1LglaUKPXWgOCW:kMePjrDtIwEVO1ZoDDra1LLPXWl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Receivable Advice_Part 1.exe

Files

09102023_2040_09102023_Receivable Advice_Part 1.rar
.rar

Password: infected
Receivable Advice_Part 1.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ