payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payment.exe
Size

1.2MB
MD5

466779d3b2aa25b757e2dae7329fe753
SHA1

567e5d0b4bb6f20798abfc2b769dd05b8385a228
SHA256

a11dec6fb979c85a9709903d66713f682c3ea031480b2e80cfb289b8073b1a43
SHA512

26dc47e45970dddb506eb8cf54bb5c89435acff7036e28eba83b07bd64239be4bf0a93088d37fa380dba5d77a823150a65f4091d6f00a0870f7cdb0f5ea788c3
SSDEEP

12288:3+DgFF0yK4HTNhaojrMiOpjtdrWBteSjs+eXbDn7HCMt+IIe4K+1/PUydAsHvQus:uDgFF4bldITerDn7i6F+1/P0MvdvH1

Score

N/A

Malware Config

Signatures

Files

payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ