27052024_1651_24052024_Rechnung_11315_352931[.]rar | Triage

Sharing

General

Target

27052024_1651_24052024_Rechnung_11315_352931.rar
Size

444KB
MD5

b1d8024f3027b78e812c6365f4f463e8
SHA1

01d0caf8314478bb339054546d5b075d727405a0
SHA256

e9f5dbc05da15fcfd0ffc992080b1d0192c5897c71bba93ac1caa688ef33fc7c
SHA512

897fd317231f4129231227471e5d6a6e2feaa63fd9438d677dfa67b6ebb62b3a376ac147dbe04f55dee481980414d672f1f2b81a1c84dffbfeee837d7913c7ae
SSDEEP

12288:J3uEBPs4NoqwJ/LtLVxcTgqq3FFM92NIsRdL:J3h04NoDtLigH3FFi2NIsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Rechnung_11315_352931.exe

Files

27052024_1651_24052024_Rechnung_11315_352931.rar
.rar

Password: infected
Rechnung_11315_352931.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ