PAYMENT COPY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PAYMENT COPY.exe
Size

857KB
MD5

8850788de30e61fd8ec8a00ee00b162e
SHA1

c67b264137f84f60aecdbd066e74173ddbfecc21
SHA256

3cc658a1c719c4eec257c26a575c2942ef747f9ea9804e1d86c1076d364a4617
SHA512

64f6ce0be756f9214d50fd0be1816cd7801b7844e2f3f22b2e9876210bd29038a6a9df74afee50d0a55f3163585e8d541019b58c7738e5915056f624a64beb2c
SSDEEP

12288:X2Sv2iNJ2iNjlylSx1uADqjJ5nZTssDd/Nw2ceLmd63WceA8gsg+tSdNrkk:X2W1j1twjr+sx/Nw2SKWcU6SSdNrkk

Score

N/A

Malware Config

Signatures

Files

PAYMENT COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ