Payment Confirmation 0028202[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Confirmation 0028202.exe
Size

709KB
MD5

c0eb3dbaa101f63a06123d4aa000d674
SHA1

2dbc295f0e363e76c9046286b47f9d7dd8af995f
SHA256

8c0e721552c34db7f85815bb3dd9e2847df1deffdb9e889fdf23127a8a81d2f9
SHA512

0ba11688bbb145d3106f9f3bc6198f7565d6bdde83a264ce616ffc00b047c2e584881081d33462d14ef7aa344e0f1c7f48a891c5a27a9a1518c828f045b3dbc3
SSDEEP

12288:FCvpWnX9zt58IXAExxphTTYLGJ76a9YUW9aNPy2nNtd/9qBl8PbBcQmY6YpMhyMH:FbNRfJ51KoChCDOk6Ge

Score

1^/10

Malware Config

Signatures

Files

Payment Confirmation 0028202.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 706KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ