payment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payment.exe
Size

770KB
MD5

844d534ed53e2ce289e54680908762f1
SHA1

6c44532a512b208454e7f9c95c4e7bcd3acccd29
SHA256

74ed6e04325307fef674714dbd65803fe7a4d5d784522c7b65cf5f9953b2042c
SHA512

17a2e3bdd0cf7c30a5e08b44e1e3b17d21281f41ebdfb1967935d54c237c18c1eb11f75304bed66c1037b2417f913c56fc709d0e8b72124f66c1c211931178bd
SSDEEP

12288:UfgZMSljShyNfDr40tw9TcXCN0nlE2pYUXcjSVub:IgZjIcDE0tw9T5IlE2eUXckub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment.exe

Files

payment.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 765KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ