Payment Advice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Advice.exe
Size

2.0MB
MD5

0f9da165a8b895e21ca24760dec0817c
SHA1

b9d762033672f3fccbf6e46f0bd6c0fd0b6814b6
SHA256

05ffa704d4fac8d3c9e75f459d79d1383699b1b24c0a7fab19a63df1a92fbe18
SHA512

82100415f1c37b569670f836c6789625aa25af8b2555718aafa2019c1de1df9db61b508e4bc2abed5a4e8fd6df710b50bcfa1d4977d53a1879b60e34695188a9
SSDEEP

12288:ZIG9ccWk3n2wjs3CVJm85ixFz3aFpY9g3iywxikr9FOH/kFSgJhiXfBnvZrweDgh:Gm9syV+Fz3/9wkrvOfkFWXfBBwYnWcL

Score

N/A

Malware Config

Signatures

Files

Payment Advice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ