payment[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payment.zip
Size

732KB
MD5

b8be65db0be024c96db1e84336d42f59
SHA1

16824316d5e32140f466c5a4080d44a251db7445
SHA256

12731e3a856349cdaaf9aabc516ec8c83de66d35de0f03763694586f1812c133
SHA512

168a037fe6b4770a0b56b9e5dc626a2eba94bf3254698d601acb738c7226a676aeeb2fd4ee70cbcd044a86da55c72639cc4a5e525e59a944310444bd6bf7f847
SSDEEP

12288:kh3fF5eClLSE1RNxWB7XmZP5pv5ZBUEk51kl3G6ByAud1qCdrB4OsjcnVnWb07:A9XSE1RNxEj2Pzv5DpzBvudoCdV4OsIX

Score

N/A

Malware Config

Signatures

Files

payment.zip
.zip
payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 977KB - Virtual size: 977KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ