Payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment.exe
Size

722KB
MD5

148b38310b43271f2b0aa056c5abb7a5
SHA1

f865f5a34bdcc81543edeab49d156859cdc6d309
SHA256

aa3a5e3035f1281d3a412956e0a0273d33e0f07500abc909eb5d9dad6524b588
SHA512

a18b40a06fdbd0d29571e52b59dde54126eaeb9ecaeddfdcf22a794ec62803c34e8d60172db9b237d72846625aa42eece5e1448b27560201153505de2573fddc
SSDEEP

12288:vEyYT9NcxlcPjy8QlnUH/PVgkkR+QGj/WnoiajsYgie:MyYrcxlcPDQlnUH/PVvQGzWnobZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment.exe

Files

Payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ