USD SWIFT CONFIRMATION[.]pdf__________[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

USD SWIFT CONFIRMATION.pdf__________.rar
Size

627KB
MD5

3fbe68c037132f84c716e548df64e419
SHA1

8ac8693205c852f57c35f7d0d04c4faf48f82e12
SHA256

aa025bc332b8156aaf9682072b1aaa9dc230cb2f70b97cfc80bc1030555c74c0
SHA512

7fb796d4b8c0e3b3076c4a4a612b273de201c8350daba74b09f9b6f6e47f4b4c6a4225700d5009f4d3f4885fb36a168115f6f7faaf10f97a94ab3c877488777a
SSDEEP

12288:qsBBFUoYrohWw87g8eY8kxFl3vu4t7lU0GT0+YWRhaBppLP+lHpGVIBb:tXUX7w87gyldzG4oaBppLP+9pGVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/USD SWIFT CONFIRMATION.pdf__________.exe

Files

USD SWIFT CONFIRMATION.pdf__________.rar
.rar
USD SWIFT CONFIRMATION.pdf__________.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ