Attached payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Attached payment.exe
Size

1.2MB
MD5

3d22da5fed78f496a6eb8fc34e0f231a
SHA1

e3a24d273cd349612d46034ad289af637082799e
SHA256

7776ae6f6274f264a686785c2970782847826bdd9c6a3cbcabab0573f449c174
SHA512

d196f6ab84e1a80b22dbc8542bc7e48ab0cf6e80215d2d7e0709d363d178858749440a938c59e39c60db158cdbc48d50427afbe11053d59937688e5794c57ab6
SSDEEP

24576:tJJJFK5fGo8mu/PHwzgUAhaFZsrkKFkS5EZC:tJnFK5f8mu/PHwMVhaFSRFkS5EZ

Score

N/A

Malware Config

Signatures

Files

Attached payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ