08112024_0034_07112024_paiement[.]rar | Triage

Sharing

General

Target

08112024_0034_07112024_paiement.rar
Size

595KB
MD5

77d523e7d21dc447a67c2d9abe9d77db
SHA1

58cff2a495059bdeac1cd24f14bd70b7bfae9303
SHA256

c3d817d19a03cd6e2a27e3fdc85d1b87b789b445fd8c4ae3a9a3d62350b8927c
SHA512

93868286c6a1added9266e50a9b388ce7f094ee05da6646632a91e2d584d7f7b6f037dd9bc3d9a53c846f0e2e13221d878b579f92e64e6cf2f6119cb3d1aeda2
SSDEEP

12288:3rJJQt7qGEU3r10gAWigb6/w8hstjBrb/4nY+MUUeEeAiz8bU1wSqpc+:Mtz3IEn8gFrbw9vRd58Yz5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/paiement.exe

Files

08112024_0034_07112024_paiement.rar
.rar

Password: infected
paiement.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VHophazJHaUs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 737KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ