Balance payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Balance payment.exe
Size

809KB
MD5

5b0486f9e916e11a47c1e4e4059ad74c
SHA1

c36ebc54830eafe3161d93bfd053e0c9930978a1
SHA256

8dc848fe48c310842fd7f7376f5f462e65587a6368238a94b851428d184c8b02
SHA512

a2989cd93fb8a97945131fc6aeac3cfb092de9ef9ed63f72add9706045b664308c85f8ebfd14c2950d5dae999668df95a6fc986fc04a980113720d8da718ddb5
SSDEEP

24576:tojP3jseHKNTn7tunA+/kS08MfmBm8Jgyrx6KlgQZx/MrEVIG:POayIugQPWtG

Score

1^/10

Malware Config

Signatures

Files

Balance payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 789KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ