c6897ccf3668d126a43e5cc0a320d8c8c9479d20d44433eef54030f8e60af8ca[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6897ccf3668d126a43e5cc0a320d8c8c9479d20d44433eef54030f8e60af8ca.zip
Size

699KB
MD5

9d63149a9c2681c9aba39913522dbab8
SHA1

00982d227de9fc5d02ad73c4bd79a9d4725e1e55
SHA256

c6897ccf3668d126a43e5cc0a320d8c8c9479d20d44433eef54030f8e60af8ca
SHA512

85068a751138334b97b7a7b1b0a82fc9c1eaa0f8311bb86f6ed17c90f5cd9a4de99ddd21aa3ffbd9352a129c2ec33f9dc93ac7ceff9a5ad8a3be74c69b3d9076
SSDEEP

12288:Cc9na/snxKjYxDWV0JuKPLbWRZHJqkJglKmuzVi5Y9uLpyBvueUHcQK0+KEjk+9U:bYk0UEV8uHZHJ3glKmuZi5YEcEVjF5EM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bank Details.exe

Files

c6897ccf3668d126a43e5cc0a320d8c8c9479d20d44433eef54030f8e60af8ca.zip
.zip
Bank Details.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VlAG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 702KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ