payment copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payment copy.exe
Size

1.0MB
MD5

bc5763f7a1451ce9981b8927122c8eec
SHA1

f0f4c8378a53d37b62af49d465d27d5e609e1fe9
SHA256

407e0dff4b1b617e65ed530db4e15c8fc23cad0528386f3610af9d338469cefc
SHA512

854056365f3f2c351540526d5394dd34b8331fc491117258e3cf252096a01cd635ca5ebefac8d961ab22b167b3a81ed5e84dfa8073f685be4f398006df4ff3af
SSDEEP

12288:v98vW/iA7rLEADqjJ5nITS7aqg3ZTUIvFD101lO/dQFiEzKShLeRk4dT+HgpVkvb:qvW/5ijrESOlJtDNFQjl4dTkvjS6p

Score

N/A

Malware Config

Signatures

Files

payment copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ