06072024_1629_05072024_GST debit note -July[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06072024_1629_05072024_GST debit note -July.rar
Size

497KB
MD5

82d08b51a3f446fee45602eb9bae2649
SHA1

bb5c8759e8de97f41dd2caebe2f04395a0454057
SHA256

efd6e3da1d021693d5cfa5395e51f901b692a3ddea6ce1a7a0f9e67e176b4058
SHA512

36fd0a73e9a91ee31355bdbda13073d03011e5241dd84ac81964db54ae037c6752acba4c75013a90a92e8b65c6c7985261afeb31e3c79ce6ab51f743437cd951
SSDEEP

12288:wrNalTboBO5v1jtvI/lBtJohwDtSzaamIXTGkg+Y:hZZRSno6RSza9Azs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GST debit note -July.scr

Files

06072024_1629_05072024_GST debit note -July.rar
.rar

Password: ACCT81092
GST debit note -July.scr
.exe windows:4 windows x86 arch:x86

Password: ACCT81092

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YugC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 522KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ