FOB TENDER 5463DTZR-KS03[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FOB TENDER 5463DTZR-KS03.exe
Size

710KB
MD5

5e30ff1d98cb47c26d6b0a3c0449f11c
SHA1

1c28d0a969cd8db92202cfe923d18e39d9c305be
SHA256

7f12d621d13d212ed99ef23b8fa1b34337a4491f8df52dd3e5c0b9f3568f2c1b
SHA512

09c77fb31508ff09b32bec6ed57751d70a3cd0167bb70898a1453af2c0b22f6803c4ca0a5ecedbbc3e734cf284d2fc3e4a7236f9be54b6bea122f35ee59d3b75
SSDEEP

12288:LFMofC1PTw3uX/CKSIJ/1PFMdCzXsbaDdaewqS4GkmxE/9l3Qg1t:LF+1TuM/MIJ/G6aenc033

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FOB TENDER 5463DTZR-KS03.exe

Files

FOB TENDER 5463DTZR-KS03.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

rFpa.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 707KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ