Proof of payment[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Proof of payment.pdf.exe
Size

869KB
MD5

810cd6b375c5819a6e1af4ed15072400
SHA1

0e247a435e1c885623afd78923766756b3716c2f
SHA256

dfb272669ddf81bea955bf23038984ee46e1e6a86c4c19dad99e200b49a0a9b2
SHA512

02170805fd1c31a237b247d4fca93b9f8c9ad3d114527c5b59be4e86a40b19bd4d01113aa652c3ac7fc45f9b914faca9c692e7f2ab7f16ed64a911f164a1e483
SSDEEP

24576:QZXwIguXRHrydEbbeBO8VPWfvlivCzKNYCbJ:n4BzbboMvkhGCV

Score

1^/10

Malware Config

Signatures

Files

Proof of payment.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 866KB - Virtual size: 866KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ