January-Payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

January-Payment.exe
Size

617KB
MD5

57e3a580a6653621e5cf5b387af04831
SHA1

2fce591d1860fd97dd800c8f65337918d09aae56
SHA256

312846aa9e03309b26afb98272f073907a5aec8b133f9c7d2bb476bf0ad42ed0
SHA512

7929f95d39cc2698168264303aff7c699386f92500891d4bc1c1cdc81b18b99c076a3a8711c75b24b69d7846030d526e8406453265c40700c23247cbeb33d5a2
SSDEEP

12288:qAfCDol6hIk0SUbpRpS1D41rzy02aHn0ruWorSxkz9h:qtt0SUbpa1DOrO0VU6lrSxm9h

Score

N/A

Malware Config

Signatures

Files

January-Payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 598KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ