счет для получения платежа[.]rar | Triage

Sharing

General

Target

счет для получения платежа.rar
Size

677KB
MD5

65f578a7ee7a9a1296044105d4ce472a
SHA1

a8974e20712f2e81945fcf241cbbcdb1a35a4425
SHA256

375e7e7bae88769f94fdbb09e806dfd8f6c5e5664f99cd441ca0b9d747699e54
SHA512

9d7290b293fd858904b1d92a7cc5a868ace9eb1aa26b3c918e8720ab79edf85752aa9e9f700d5c0aa434814c4d661b2c5b21c4aea95c782540e3cc63b8064936
SSDEEP

12288:EysJReeYrAbOuV7ay7p+zHKY4zxIZgYBe9tRmZISg3dZbk8X/by8/B47StoYx+EP:7mRRYEREwp9YwrmZIdNZoWbt/C7StoeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/счет для получения платежа.exe

Files

счет для получения платежа.rar
.rar
счет для получения платежа.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WIjA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ