Chase_Bank_Payemnt_Advice[.]iso | Triage

Sharing

General

Target

Chase_Bank_Payemnt_Advice.iso
Size

78KB
MD5

d78f224ee6d1abb19be09fa08cef1277
SHA1

9beb01dd320259674a8211e43058a849faaf8bc5
SHA256

52b147dfc248835da236c6becbfce38ab5706e94202f05024b14fe0a1545b183
SHA512

1028e6e46e87680b456a4e3712bcd00038405cc7f5755858f63386a8b0a72e1007aa70799944167bdfe40c64b1a0e108826a4dc7b0d1cde9f65259a5d1261d8b
SSDEEP

768:fQjy5G5tItmxH2dIFyyXOLTqWEDDunXm:fj5G5ik2dIFyykqWSun2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Payment.Advice.exe

Files

Chase_Bank_Payemnt_Advice.iso
.iso
out.iso
.iso
Payment.Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ