90f69f5f09c68cbd23635aac79bf127ad990160d8846c086afedd70df82a452c[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90f69f5f09c68cbd23635aac79bf127ad990160d8846c086afedd70df82a452c.zip
Size

642KB
MD5

d9942a7ea95e43ce4c209b9929c776f7
SHA1

d2f1f55d0bcd2773b671b9db6d3b242b632d9a6c
SHA256

90f69f5f09c68cbd23635aac79bf127ad990160d8846c086afedd70df82a452c
SHA512

743440b9e1b703bed43f7f61e5e6ce98acf42e98ed12f5ea26427c1feb918cb14065940acb8b6274e7fb56e9d4b3e0ac740f87c7f39577a45e2718611f0895c6
SSDEEP

12288:IKWzOoiOy8cEpgvCPekTH7SZQM879u3HP1DpV3L4Q4T3/gGJF/1:kOoiOyXEpCCPe6H7I18kXP1DpdLUgGd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Advice.exe

Files

90f69f5f09c68cbd23635aac79bf127ad990160d8846c086afedd70df82a452c.zip
.zip
Payment Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ