bfefeeda3ffd988743947395d290bee1c8fe9421f49868b450e76d8f87ec359d[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfefeeda3ffd988743947395d290bee1c8fe9421f49868b450e76d8f87ec359d.rar
Size

11KB
MD5

3aeb6883b47b0bc65c60891d0a426896
SHA1

2416daabbadccd38ab4402afe60c78b496c8cff5
SHA256

bfefeeda3ffd988743947395d290bee1c8fe9421f49868b450e76d8f87ec359d
SHA512

8ef372d1461434c3bd61f64663a9541d9c50150ad5019e82ee5110b1418c3d00c1a44fa46941219cf6fe3f860a6e16dc174883afe58475b96b4ae9022e370cd8
SSDEEP

192:TKrekzw4yR1IqR2bcb8wY29L6MHry+ZsX90bfZwQzAfHLAZwV9jAFPqJHnophWeB:T+eZTLFRvIwY1ArymelLrQqAPqlnoDnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SSTF Co. Ltd - Purchase Order #28783.exe

Files

bfefeeda3ffd988743947395d290bee1c8fe9421f49868b450e76d8f87ec359d.rar
.rar
SSTF Co. Ltd - Purchase Order #28783.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\2023CryptsDone\bank\bin\Debug\Secured\bank.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ