BankXCopy[.]pif[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BankXCopy.pif.exe
Size

74KB
MD5

aed0790f468e61e61541c3ba68c1fb5b
SHA1

f3e8daa5f19ae9ad5ba276cc00c4b713b3bd97dc
SHA256

d488d5551267b1f56a76090fff305bdd77b6add464bc0de04185720c622cc684
SHA512

6e9dc962d90c56be60b57a35111b7f480a5c235707d1e2be9ba7e343577d939b54d2db56a9aadc1d8d6499c37a41606a146f34cf539e7847f1a85ffcf43b125c
SSDEEP

192:lWXaKhwWmON31hnz4nPt7711rMy89k68/aOthlebUEpzup1LMr:lQNZmOF3nUF311rMV9caOth8pzuj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BankXCopy.pif.exe

Files

BankXCopy.pif.exe
.exe windows:4 windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ