bank details[.]lzh | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bank details.lzh
Size

693KB
MD5

560612bae6586f5fb2ef08fa85f743b8
SHA1

a709cdc09e220c8b556a42687662134a221ead81
SHA256

e450a0333e6286f8b0484d9ab75a5d44b3705bfa17cd8e833546e7f13125c6c8
SHA512

a7068630e99eda1fa6fd20597e612db0e7f6de409c0c4317b67632c148b5fad455c20901b4ab745159f629a39891fb7866d76c8e3f35b77b9cdf3c06714ca425
SSDEEP

12288:PUiznB6hcv2geSJsELvB7kXL/ZriPNJG242YD+bnKm5YASiUR:PU2khlElFo7/teNJG242NK7ASiUR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bank details.exe

Files

bank details.lzh
.lzh
bank details.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DqVh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ