nBank_Report[.]pif[.]exe | Triage

Sharing

General

Target

nBank_Report.pif.exe
Size

923KB
MD5

d97c2259e60a42aead2559f198ff9a5a
SHA1

5861e84df676af552106ab15c308ad44662a563a
SHA256

903b831a6844fe65857fc4084226322434c939ff5fb4425da901bfed34399fd4
SHA512

087232c285836b3ef7dd7c87c955a240425ddee96ec5fba0bcca7137207be68eaed4d5ecd507aea1dc2bec944b97fd2b9a34805f73e02078bd61404008e184f7
SSDEEP

24576:44E53gielVPJjLaSCR/avTRbonhF3ia8BbZOu:448/eTRjLUR6TRbI8a8BbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nBank_Report.pif.exe

Files

nBank_Report.pif.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fLpg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 722KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ