Bank details[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bank details.exe
Size

856KB
MD5

4efc7faa554275f98712d2ebe56593b8
SHA1

02377c1f9fcb3d72c3ca58607a4965adee84c839
SHA256

317594b159dc16eaef361c1582a3e778aef2f790c30cd81c7b5d71067f27932f
SHA512

930e7bad826a1cffc7cbc3bec4f2ec5af19cb9695a059d4fa9a5ba4018fb6f1740b4b71e6b3331d82f2c000943526e7db51c4bb1863cb784fb35d226d52d9e0b
SSDEEP

12288:eWDFoL3rlW4ysDBgldS+seJXuVeujdRXjXSnW+dU/AX/m3IxLZjuorBtmYsTW:CvusdmS6JXGeIX7eWwPRFaYM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bank details.exe

Files

Bank details.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HbrT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 686KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ