Payment Advice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Advice.exe
Size

726KB
MD5

2502ac1416c5ec09089cb28dd890ab9c
SHA1

1388798c688eae57e853e01f23df45efca0705ec
SHA256

afc3c5e135c2fe48a7c4228db265d53b78a19fbbe9af723efd7e429fa7145455
SHA512

8b0b9569c3f21d1cb9134e5b2a17d5896f52e7a43978495d4b502b46b5aa8cdfb117c6ed632f3c119c917d541561c7cdf522011f8248b05abf46addb1a97e696
SSDEEP

12288:UiY8qpP1RDVazMSByeoqy2cdgZhu3Mex+LddxNuxe2UhYLVEn0KAMaQbvjxF4wi9:FYXpP1RAAO/JhYLVwaQfxF9tH6Zts9Pn

Score

N/A

Malware Config

Signatures

Files

Payment Advice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ