Payment Advice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Advice.exe
Size

1.3MB
MD5

26352119922c2550a6a2464b6ed08673
SHA1

9846bcf6af45289f20251591955362e71ecfe31d
SHA256

cdb80000600b9b5bca34480c739c9fe1a3cf13d0cdd0dd7b0706b7773391f483
SHA512

2f46892d220770a457adc3d62dc9f7882e953b55fbf54de11a775ee7fca904fe70e3af24478b7ba3ce484a29b1f12485af03b6f36f847409c73e3b3db7896475
SSDEEP

24576:0Gv1oS4a06Fb3qx6dcTZC8+PjlnT2zROm0UgeKwdlKd2PF0L9Sbaax:u6Ad9Gju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Advice.exe

Files

Payment Advice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ