RETURN PAYMENT TT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RETURN PAYMENT TT.exe
Size

970KB
MD5

720a9fbdadec452d644e2eb3992d5cf5
SHA1

1aa50b9219bd7dc957faf163b1880c9aa95f4ce9
SHA256

c89d8cc3c52b8b56669289df85876ab472b3451e459f18cfd35d7f74e24dc8fd
SHA512

1dcde06ba87d24312be497e1af3170bf9e54996d43916338953f04d18c9f6763c66ebd84bdfe1b88c37e49214ebe1e92e67629e5fb0b36e88e6b20bc0e304218
SSDEEP

12288:Oqb7JFYADz1KGwdBnYorrbT2vNSddzYUjVjMvQBnDy06IxJeXSX5/bIttfJ:9XJwdrr6IvvVjEqndJ15G

Score

1^/10

Malware Config

Signatures

Files

RETURN PAYMENT TT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 959KB - Virtual size: 958KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ