Online Banking Payment Advice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Online Banking Payment Advice.exe
Size

912KB
MD5

a74fff6e183ac2f22feb3edff1a581de
SHA1

a69782a458f99df0faad8488ec0bf6578885a389
SHA256

95f60da49e0b3b74cbc5232eb3332000146c1d2a5b4923fb118b8971585fa81f
SHA512

544e67e106a4d1f5770816be2db00b005acfc57652025a188a6b0a55a6bc3a664d28dda1386f3cb5975077ffa7720818596a0564a641d5dfc77e7812445081df
SSDEEP

24576:q2kri++l37No5YecPqFIHvpnu0E07EAi85LcJnEut:um9l3725cPHxu0Pnv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Online Banking Payment Advice.exe

Files

Online Banking Payment Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 902KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ