402887fb91ce429b6466b3d437c3b068 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

402887fb91ce429b6466b3d437c3b068
Size

245KB
MD5

402887fb91ce429b6466b3d437c3b068
SHA1

1570fb869b4a110e16f4b3b6575abaf7280c5ad0
SHA256

df329aa9d9bafdd67d4f8e585cc814255edc4ade2c619f80eb23c43fcc692293
SHA512

48519e972ea701526e0fa0aa5311d4b613f43cd3cbd5dfb91b93d6bcd7f8278935c7714d373cfef84baa7584d6fd4fc1a20d924796b4727d886965f234e0fd51
SSDEEP

6144:W6r3CRBwKeS9Z/Hx2d4yekhu4ED0VGefNLMfKked2LJ:0RBw3M2AD43XL/U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REMITTANCE-54324.PDF.exe

Files

402887fb91ce429b6466b3d437c3b068
.rar
REMITTANCE-54324.PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ