Payment Confirmation Pdf[.]exe | Triage

Resubmissions

25/12/2022, 11:01

221225-m41esabd66 10

24/12/2022, 17:23

221224-vx5d6aac75 10

Sharing

Copy URL Twitter E-mail

General

Target

Payment Confirmation Pdf.exe
Size

307KB
MD5

a206a13016fd0a30c64f233aebebf1f3
SHA1

ede977baf7329f1e1fdff1519a6484fb9766e158
SHA256

10c5dd209029fba7f513171eb5c2e2e62e43d3f5f8c1e18c22fd84cf501d82b1
SHA512

5ce3d3e43d46413d41cfd428d75c45201516c3b9b6a3ba16cd79e19ba1ed866c866f6fc7575c077d17c87e0c85a7bbc629c9ceb040cc38019d44d0349f7d5751
SSDEEP

1536:6TJ2beD+oPKjg7cMpdLVPZby1U/r3EVi6DXxhop:gwkVUXM

Score

N/A

Malware Config

Signatures

Files

Payment Confirmation Pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ