Payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment.exe
Size

576KB
MD5

6ec3380b4915ffff812e653fff488aac
SHA1

aaca1d5d89bff953852669ca0c9d5e5dd41f9f30
SHA256

56d0bf6b07e19502f0af8592757f163d37f6b6af2ff32fbe40d6c19c8e077dd8
SHA512

b5019cb96b3666e577811c49159e90a4e20197f213647156da3b5287835129a1ba2a6307e92d8a7a067e8efeb368fb5a0c5aa6fa5fb2bd11d57c38105617e5b1
SSDEEP

12288:ktzX+zHTLDtE3nemZXFAACzXFKPuLRpBIaY6+AyEPtTz7TD:+zaTLRcembRoIeRp9vrPt7

Score

1^/10

Malware Config

Signatures

Files

Payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 573KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ