Payment Advice[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

Payment Advice.exe

windows10-1703-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Payment Advice.exe

Resource

win10-20220812-en

snakekeylogger collection keylogger persistence spyware stealer

windows10-1703-x64

15 signatures

150 seconds

General

Target

Payment Advice.exe
Size

729KB
MD5

ec8c8817504f5aaaaeeb6dcd8abafba7
SHA1

17f5ce07613d0910d99aa795f4ac7a4c12807c70
SHA256

9dffc4e10aedca84107a8caa484a61373b4d1916679121fb68d3be9827368cff
SHA512

24143e54410034f9dbe5c0a577d93084281e5af261e43eb7ee2c7598a2da57aa04f5290d4aca2d0decfa548096737b7db768460f2d95e34a4e44f14b67cefb2a
SSDEEP

12288:5m/ZNtBZBacFxEZMWY7/UaRJPZD3fT4GvIB6+s8084spujW7cyBOUXew+HzpmnE5:5mXTgvIRD8eIUE084spujW7cyBOUXewN

Score

N/A

Malware Config

Signatures

Files

Payment Advice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy