Statement of Account[.]rar | Triage

Sharing

General

Target

Statement of Account.rar
Size

618KB
MD5

3301f06617256a8eb1b61c43f59401cb
SHA1

f21cd314928ea6ed2e7dd4ac1d79fe4dd24052ea
SHA256

36c6500eeae2956b4c5bcbb84aa87198c95d8b16efa0bd94b1bc604f6bede773
SHA512

7284c2b32babbd4e04f3a97fb9d7c95da0c6b5538f95231e5b90ba2cdfd0afc29d91b2f67880c1517a8d1b38aea120cab8fbb06d59a502de65dc0ecfcc078f1a
SSDEEP

12288:DE4OfhTLIGBqLyLqgDv4ur8vbi3I9yH+57G5J1ivc:TOf1LIGYOOIwbV93G5J1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/Statement of Account.exe

Files

Statement of Account.rar
.rar
Statement of Account.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ