bank account pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bank account pdf.exe
Size

716KB
MD5

50bb3edfe5e8da7da67b9a0ff6e991b1
SHA1

038a2dcef9df250c3067440b8e75c3359efa9291
SHA256

a0fb662473509e8c430d1dde009a85acc2c0d57ccaba3b290380d1f3d4ab9457
SHA512

eeff34c855cab34c83f35c375869d7f8277ae9140688b4dc0d31f478fb16b1046da20684823ef76a7b946e9bca29c2a55f43a3e3c38e9e00bb22291755cc76ae
SSDEEP

12288:nM2MM/gR/mZRM+BUGOLPj1aktUNzFShakI0Hngv58ADR2TSQtwxe39aKkSqtp5V:ngkZR5OTLPYkt8zYhawHgr2RF3AKkT35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bank account pdf.exe

Files

bank account pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 713KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ