Payment slip[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment slip.exe
Size

636KB
MD5

a3b3211726e334f10f03d7f1fecbb548
SHA1

214cc84df0c3f4f1c00f3685a2c0b7fcf2fc64dc
SHA256

2ce7d781b4110aea5d90e86a8798e44516a33724c212e4b6099cb4babb7090d0
SHA512

8d6512e1591fac4f2a2ed1b8942b4c91d0c3e0633591cb1e4a9823842b685daf1d67bdd56e2881b5fbec7448d0e51280f13b064b6543d7fc3f03c7151412f8eb
SSDEEP

12288:ycetKJ+C1npUFvO/u3RIbbWBJRrFreOrbNj5Ay:yce4YCRpmvp3RWb8JWOX3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment slip.exe

Files

Payment slip.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 618KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ