Remittance advice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Remittance advice.exe
Size

600KB
MD5

d25f3ee44bb814147d9dfcd6dc2edb24
SHA1

24b2a56b602e2da8804256adc147b5bdfbf94971
SHA256

3c3de54110bc665e6d31e2455372fc489ca5f3be4e0824ca7c0b58802663dbe3
SHA512

b92da0ed7ff346544703c78ff8684751ddb5a3047e7a932371d801d339ff8b28134dc64fb8eae6027e0a68093fbce0905d3c5abb65f81a1fd4962d4d6c6c079e
SSDEEP

12288:37uONdPRKI17N//8zsPOZXLqJfAMQ3rwkOQ0+BSUXQcMB1o85:KONdPD//8zyOBLadQskOP6tMBL5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Remittance advice.exe

Files

Remittance advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 598KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ