Payment slip[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment slip.exe
Size

650KB
MD5

32cf9ae9928b9f638a3172ededc1a00a
SHA1

94321e3183d9c031d8e93e47eb58d8d65ede3a13
SHA256

7197cfed2cff1f8c3191d46ca165b089cd7d1d46ec91d5536a70da23b361c03d
SHA512

121677cfcb34f8ee0971782e07f7527cf0b4d09e9fd7157482ac7710a3a6d615ee64101e378e4db6cfda14c1abc53c3ed2d41a4762a678c9fe859cdec855a1da
SSDEEP

12288:tkYmaI0pW48+hNknKT7GJejOtysczjLdhys//HzrgML3OEfKvajdC8Qi4fliadEX:tvmp617GJrYvXLdhys3TrgMrOEff5C8J

Score

1^/10

Malware Config

Signatures

Files

Payment slip.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ