PAYMENT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PAYMENT.exe
Size

655KB
MD5

2b4bb422eac757cd3fe1ca6ccad3b813
SHA1

46d4893ae8a059bc2e1870842804e6e8843b59b8
SHA256

c29f70a89c9eb56438b46477c306c619ddd3cdfd8297a5c7973718eb874dd645
SHA512

39148841b55fe004a5c9b0ddf90ffd4acd27ae47e0b5405f36e598ce46472c5d1b0aa73f122877259284b2279cd3f6e699b5032d9cc0eaa1ac25ff6719bc63d9
SSDEEP

12288:1FAgHtDg5xE11aTkruL7WD0bJoDgmodUwZgT/OT1YvPIcvPXWaA5ORk/NhqNRa9:d4FnLGMbSLOTSPI8PXOERk2i

Score

N/A

Malware Config

Signatures

Files

PAYMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ