payment[.]exe | Triage™

General

Target
payment.exe
Size 1.2MB
Sample221004-qsc2wsbdcl
SHA256 a11dec6fb979c85a9709903d66713f682c3ea031480b2e80cfb289b8073b1a43
MD5 466779d3b2aa25b757e2dae7329fe753
SHA1 567e5d0b4bb6f20798abfc2b769dd05b8385a228
SHA512 26dc47e45970dddb506eb8cf54bb5c89435acff7036e28eba83b07bd64239be4bf0a93088d37fa380dba5d77a823150a65f4091d6f00a0870f7cdb0f5ea788c3
SSDEEP 12288:3+DgFF0yK4HTNhaojrMiOpjtdrWBteSjs+eXbDn7HCMt+IIe4K+1/PUydAsHvQus:uDgFF4bldITerDn7i6F+1/P0MvdvH1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

payment.exe

.exe 1.2MB

payment.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a11dec6fb979c85a9709903d66713f682c3ea031480b2e80cfb289b8073b1a43
MD5 466779d3b2aa25b757e2dae7329fe753
SHA1 567e5d0b4bb6f20798abfc2b769dd05b8385a228
SHA512 26dc47e45970dddb506eb8cf54bb5c89435acff7036e28eba83b07bd64239be4bf0a93088d37fa380dba5d77a823150a65f4091d6f00a0870f7cdb0f5ea788c3
SSDEEP 12288:3+DgFF0yK4HTNhaojrMiOpjtdrWBteSjs+eXbDn7HCMt+IIe4K+1/PUydAsHvQus:uDgFF4bldITerDn7i6F+1/P0MvdvH1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

1293710

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

payment.exe

mscoree