payment copy[.]exe[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payment copy.exe.bin
Size

713KB
MD5

b4812c1ee4921b83603eaa4d05e12b9b
SHA1

c2f97438a9cbc23160d42133816b248baff731bd
SHA256

5027d53a0f057968982a4c2610a105ce2fe89d9e2de1ffc70177c750be3a8385
SHA512

dc654be40496e7132c8f22b2514641b1aaad148eb8edad3ed60f2fe6e553eb3fa9e9cf562a2e414e94feca5529825060ed4a9f229e201ffbe242109d6bbe796b
SSDEEP

6144:ksVpZCRorNd1+fsFMFdZUosBRLuw8uPTM3cOg2+Src7oTeMO6Rk2oq2dQIFvDQ3D:YHz/IRLxpPTmBgVStR9orbFv2vZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment copy.exe.bin

Files

payment copy.exe.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 710KB - Virtual size: 710KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ