Payment Advise[.]exe | Triage

Sharing

General

Target

Payment Advise.exe
Size

707KB
MD5

0d4fe0932e4c31aaa2b69a5584d70ff1
SHA1

c8ea2e87dc00ecda352c77a09e860fc642d07b3f
SHA256

860da509a25f16cda9a80a5063d4b23bc6a702406fe3c94d69bfc10790219b4e
SHA512

8f17170346f64f1c669858d5255a38e695954dd157e3d6967d02e9a72020f4a71818a8b4944f87fdc43e1ad9d5bdd212e2d930682314573eb154afa431697dae
SSDEEP

12288:31tKIXOx6IGBJgB4rJjQ9oP3WWzJO1riZ6oCkOMBx6IXhUYUHhXKK:lgI46hBJTuGmWY1C63kOMBx6GhUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Advise.exe

Files

Payment Advise.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ