PayPal SoftWare[.]exe | Triage

Resubmissions

06/12/2022, 19:45

221206-yggjyabc7s 3

06/12/2022, 19:37

221206-yb821aah4y 3

Sharing

Copy URL Twitter E-mail

General

Target

PayPal SoftWare.exe
Size

199KB
MD5

a3b09a823176a9369f3b58ff6c145bd9
SHA1

aa3d5bff685cb4f67e447830c614c4e598d97eb4
SHA256

57cde38fe82a019ba9f54502fb0cec0eaaa714c4cbb5f95c1752656d85654be6
SHA512

dbb4eccbbf33392802d4f3cd05f950ca55542d390d6618ccb9c22c0ade1231eb6d7c8c38c60d8e7763d71543412e046d473af575e6397022c8cf52a6e4e742bb
SSDEEP

3072:a4leh0qNmrch1DXcTH+45yYI3SURHUp1yj4ozXoYcYejYbl1568+4cOMHqgZV/9:a6ehVNpy+4IbIA4oUYLO3qgP/

Score

N/A

Malware Config

Signatures

Files

PayPal SoftWare.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ