30%TT payments for Inv #GF06011[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30%TT payments for Inv #GF06011.exe
Size

773KB
MD5

0ceef3067ede0b2d85a713d3bfcc8aee
SHA1

ecb228a107c9634b3a0eae07c17d6e03350d7028
SHA256

8e92690b6455cb017225532244dabe70c659e55af9bb0d04a753127f75f3d7df
SHA512

c5044f53e5b220dfa68f785731adb9ba9c3a555682a2e62a8fae3c1271ccae329a858a7841de215f69de28ed51e0d31b3ed558120dc60507625ede263cda2993
SSDEEP

12288:Xsx1QVxjis2AlGty5hWuE2cUKSQfbX0Qv8yJe:84zigGA5h9zJfQfbXvUyJe

Score

N/A

Malware Config

Signatures

Files

30%TT payments for Inv #GF06011.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 770KB - Virtual size: 770KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ