Bank Advice[.]exe | Triage

Sharing

General

Target

Bank Advice.exe
Size

697KB
MD5

b36023c6fc81834d7a26a5555fea99eb
SHA1

ac45970e50f0fa6166b5143b2cf702c675ffe126
SHA256

d9bccae6058712dd2fa551e38b5b0e6bb72d59d50eeeefbedc8e9fab6a873bc0
SHA512

722f510e75a53dc84b400239d924a5fc38c72a8c7d39225f25cc73ab82384662f82237242845c718c0a6145eb16d9d966203afb3cb90d4c1e19ad6c82a5facca
SSDEEP

12288:T5F6HkkoF29QIfX5hRLVH2jjo7ylecoUdxbaOLTTwNvfplHGiDR8:T+5FvrT77yBxbaOLTcNv/GiD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bank Advice.exe

Files

Bank Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ