remittance copy $58,670[.]00[.]exe | Triage

Sharing

General

Target

remittance copy $58,670.00.exe
Size

608KB
MD5

dd7ac5f2109c2cc61763ae93e4fb955c
SHA1

558e89789946fb4cfc3b63bc258ddfe23d42c558
SHA256

84b2a0360556088e4aad29627d4ed15d53b18aa72d9d98b4b0d1be27916c681e
SHA512

783124beae908538c6e19a710669fa7ea85a95778ca4ec06134d30599a284c3540752144f1fdc9c1cb8544f2cc13a7ddb478132a00075d93820952a13313bb87
SSDEEP

12288:ptapNjL4yL4uaRt9f/JUfA2BMm/In4wqS77Eb7FnPgRh:DapFLXIt9fRUI2umawR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
remittance copy $58,670.00.exe

Files

remittance copy $58,670.00.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

aTXE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ