15052024_2347_15052024_new bank details[.]rar | Triage

Sharing

General

Target

15052024_2347_15052024_new bank details.rar
Size

706KB
MD5

471c1632cb58c727999c81d5e6c0b050
SHA1

c714bd4c174586d9c680fd473ee0282704caf90f
SHA256

99c4e32d5998f98675e22ad6619193dcc94268983b6ff57ea41793b486ee4cfd
SHA512

24f404c47ad67b257ea57fe6db2f1b89ef2b9e94d9597c9a11c62602d492476404b8cae6f8700c6ad816d4ed6335ad453d1220e0c18ad57caa9e6888c5982490
SSDEEP

12288:FM0bZ9Z1D4hFdH8Te6WM/O6XCl+ojVrCQrUoKyLntFtD5BBAs1AtJwnete245yJT:FM6fZ1D4T0nWMlIb9CiU/mntFDBLitJ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/new bank details.exe

Files

15052024_2347_15052024_new bank details.rar
.rar

Password: infected
new bank details.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 795KB - Virtual size: 794KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ