potvrda_transakcije[.]exe | Triage

Sharing

General

Target

potvrda_transakcije.exe
Size

631KB
MD5

aa0e19576e5634701bd583e196877856
SHA1

5a75ec4ddc5f7cc2f30d8a289f91c8f62067ffaf
SHA256

f07d13e42a388a55a358a07cfdcb04d0dcb4ac4219b6805372dea3567d97f591
SHA512

8f9efe1e3fbc2e6a464b4347e597a67573a412525bac228413503af4661dcca6b4021425c6c7d117128444c4362466858b7395514e445775654a9e7834ac03fa
SSDEEP

12288:UHafApk9jQrYuqyVJ5XAn29p42Ng0aYO0p/hNXda5vcmjLI20mNv:U6fAu9sFxX9pv9W4TsNjLIG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
potvrda_transakcije.exe

Files

potvrda_transakcije.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

PNCm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ