Proof of payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Proof of payment.exe
Size

840KB
MD5

070ae05aca4b1529ead2b74a25529918
SHA1

f9c31c2a5c5d8f13d1764304564bd19cd2fc2de9
SHA256

d15b340a3b97f4ff23f095ecffb326b6ec7b89a8681b055c886e827b78ed2bb7
SHA512

7ffae366481f4eca0310c5144dd09b4d2f7f58850a08b757bc50f2d8272d463f47bcc9376095f8bfae313f9c75b229fe52ef608e14b4b22ca7e2961a536eb812
SSDEEP

12288:gtfEuS1v2/Vj9xU5m8jKTzW7FAtJ4poM4Y/0xdMCgn:p1u/LxImWMW7utepR/0x+b

Score

N/A

Malware Config

Signatures

Files

Proof of payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 838KB - Virtual size: 837KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ