Confirmation_transfer[.]pif | Triage

Resubmissions

08/05/2024, 11:56

240508-n362lsdg63 8

08/05/2024, 05:54

240508-glxnaage95 8

Sharing

Copy URL Twitter E-mail

General

Target

Confirmation_transfer.pif
Size

764KB
MD5

87f2963ff184b1b50d0c2e313e6b2782
SHA1

9fb3f580b8f9bb4577fa46cf86fbedc1698bb866
SHA256

1d61f422141f869c7ac5e4ffa9d52d8ba576e76cc7c82adae9955a63170db1db
SHA512

bc011b9e76dac559f79cf0d0ac98de6c6af6b73aa2745cb19d6ec204f2a61e817e7941b26862147a13f6d3b83d77ed52bb5dce1cb6965c20075695a8bffa6242
SSDEEP

12288:0pI72iNj/SHlT9jkka+UVaCbRSDFqsyeksFZGNCJ5zLvfciG+5rAoG:h1cHlZjOca8ovRsFZgw53sizG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Confirmation_transfer.pif

Files

Confirmation_transfer.pif
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Jryo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ