TRF NP 558 PAGAMENTO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TRF NP 558 PAGAMENTO.exe
Size

787KB
MD5

996c2fc52849896f325ecb13e398b42e
SHA1

533bd4d88af0b09d6e672948bdbb2f49a62b7749
SHA256

9ddff868edd0f8878268fd0b5a5e481aadaee42ff56f1fe05d9e38791faaa786
SHA512

be20df4c0790f9477cb9be6e5fa37ab3e2059d2f04491fa0456980835c256aef1b90b2828c3a1f10d3a81e98915f24253c15b09da907b1e47a96741db4e99a8f
SSDEEP

12288:AY6BCDYGhSZNRDZHpbJD5Kyjn0bdYT9tAytThwXtL:ArCDYGoNjD7zwYgcC

Score

N/A

Malware Config

Signatures

Files

TRF NP 558 PAGAMENTO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 780KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ