27112023_2134_PAYMENT[.]iso | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27112023_2134_PAYMENT.iso
Size

1.2MB
MD5

088b52ca1adf2976f03a6ec29fe338a4
SHA1

196bd8442d8e575d60551efa5fe6e31d556f1cf1
SHA256

0131ee2bcb4481ca3d2b876b79e8c73d751b29a577cb454f5a3b786ba90e330b
SHA512

0cf211e3ec2119d8cf8ecdd996fdd34cf9ec770048c2cf0c6a961374783ae1f6124c1c589c413d5b2911542e99a18f36e033fdcd2af288dcebc9e0ede0c1d8fc
SSDEEP

12288:FuXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXcXXXXXXXXAXXXXXXXXXXXXXXunIk8XSt:FlPmq+dzb7YZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT_.EXE

Files

27112023_2134_PAYMENT.iso
.iso

Password: infected
PAYMENT_.EXE
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ