September payments[.]rar | Triage

Resubmissions

01-10-2024 11:17

241001-ndxfwazhrd 8

01-10-2024 11:13

241001-nbv52azgrg 8

Sharing

General

Target

September payments.rar
Size

669KB
MD5

240a73a11e30852b9263e74bb2466783
SHA1

bc0d38722e4a645ac393fd73a250f7e8f40d6ed0
SHA256

de5c620f7574002c185cdd42b8d854d64c5a86102358a4cbd03a08b4359b9730
SHA512

dda5831cfc90439bf927bdd31c4ddec6c43be8fec32966c4a4a2e5e10aa2c0368d8ce91579587af186e652113670d4c4c83141c9f242e6b875b59f4cc6aaa72a
SSDEEP

12288:/a6DZJ/LhA72JcNSWTWrqz2VMHAX8BohN4Tv7TBdyms3wDC+EF+2e6F9c:/aQThA6OZvz2VMHv8N4TvBps33+C+2JO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/September payments.exe

Files

September payments.rar
.rar
September payments.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Xe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ