Transaction Notification[.]tar[.]xz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Transaction Notification.tar.xz
Size

302KB
MD5

3ac6e8b8329c6bcdf717d138df160970
SHA1

04c3e04e1139569b591ca4a83d3ea4fa2b07f416
SHA256

ee66a25686390f9653ec6834fcda485c2933010ae3d6a6fff02c2c5bce2a6069
SHA512

bb1869663c31a70b01ce72a3b4caa48defee2d4376053c4417aac45b4b3882cbd4bd62eccc8d9233daceebb0b87f3dfef31714ce765c8a54f5bc0f45dfe044e0
SSDEEP

6144:Db8CygPArhH0mwz3dLfNw+r6ZGf4zDkZxz22jaC7LXCTox1:UvgPKwzl27WL62jzLXr1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Transaction Notification.exe

Files

Transaction Notification.tar.xz
.xz
Transaction Notification.tar
.tar
Transaction Notification.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ