payment[.]exe | Triage

Sharing

General

Target

payment.exe
Size

686KB
MD5

127e72f18d103242d53c3f2f985afbc6
SHA1

ac5afe586e2076e137d4e6590d7a342ae4ad1349
SHA256

8ab970bd939d38f2d99d43e9d831a4871ad22edcb0d1287d3782a432050b30c1
SHA512

7cd81749bca1892474ba50a64f83e6d24d9961575482d2f4897d2b6fd5329cbfd8da826b81bec8a3df426d20211c2042eca4c6c31999881cefb85ac52c6ec464
SSDEEP

12288:tc77oMdswXyPuuBO9fRPOGyRR0BebpN9hHbBjktDB5UKlbWJppCBvU8u2KIQoYjK:gqOrOv0BeFN9zjUBhMuJmF59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment.exe

Files

payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ