remittance copy $58,670[.]00[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

remittance copy $58,670.00.zip
Size

599KB
MD5

a3f938357df117eae81ae8248e83d7c3
SHA1

52a0acbfe2c46cfddc8f6a16742a7fb945a7a68c
SHA256

c3e26a30a52d5d7d17b64775c8f61fb2b7727c256c0b1f9b518ad5dfb66c152b
SHA512

224f3aca07b41a0d97f8903eb019b9ede39d337183b91ec12479da09d771e201621a75b35d05c9bf5b29a293c926a5151cd13ad3e6e02e391630a71587450b31
SSDEEP

12288:6PIRb+1373s6l2cyL4ueRt9f7JU9A25MmHI/4OqS5VCHpSNQhIl2zCS:66b+19MYt9f1UC2a6S7eXuS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/remittance copy $58,670.00.exe

Files

remittance copy $58,670.00.zip
.zip
remittance copy $58,670.00.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

aTXE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ