Static task
static1
Behavioral task
behavioral1
Sample
Remittance_Advice.exe
Resource
win7-20240903-en
General
-
Target
3abc1fe95d566420c125be90f7ac29c3f9e59876cd046c99973a5241f8ee98ad
-
Size
273KB
-
MD5
0c60e63f4ac8e9fc6bf81836ad94d78b
-
SHA1
471d497283f3525eb3c8faffcdbd86226663fa7e
-
SHA256
3abc1fe95d566420c125be90f7ac29c3f9e59876cd046c99973a5241f8ee98ad
-
SHA512
7d1c1aa9e7a1e3d9c79f4198b24676ba9a8884ccc32ec9d4a59c19b18674d9cdba98ab5cdb134a70c4214b6d561b13683a90700ad4d02e89fa589f3fa60be6fb
-
SSDEEP
6144:frUu2U5l2f1tXVlfPxraRsrVe3VVrkuAAr6d2rP9gXd01JOt:frUu2U5l8vnBaCrVe3VVU2Ott
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Remittance_Advice.exe
Files
-
3abc1fe95d566420c125be90f7ac29c3f9e59876cd046c99973a5241f8ee98ad.zip
Password: infected
-
83bd57e1e08bbfa52abfc5a3fc53ea0db08bb5d91448fe2e919e22cd87412fdb.7z
-
Remittance_Advice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ