TT payment[.]r15[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TT payment.r15.rar
Size

511KB
MD5

1640f2b7b527a5ffa51a1df656735c9c
SHA1

8986ab5fd1b2054ee771c08ab41100fa5dd0c0fd
SHA256

d6947c8a5245a27a6898010afe85f77dffa59d6d2f81565d8d593c90370f347c
SHA512

9020f29d6b01144d813f20539c1147d991f8c378b003337d1b63587bb42154f779400984f1663fbf7154d3b2d47a632bccc7cd4055ea079e76a52ecc5e6d0609
SSDEEP

12288:wH+OJBuW3qWWm2A8PC9PJ56oUIc+tIJHeaTnY/8B6:udJJ3q42A8KNJ56oc+tWHF8kB6

Score

N/A

Malware Config

Signatures

Files

TT payment.r15.rar
.rar
TT payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 809KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ