Payment Slip[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Slip.exe
Size

718KB
MD5

bfcc7c29b09747aaf19d959f3a2840ee
SHA1

0e8ba089874b1712f080c762e98b9cb6e3a4b1dd
SHA256

93a9ea827dd8635158be7b107a40feeb50a52566698915f0c499a5f50c157200
SHA512

a80147bac912e7bca77b03ce6234ca0debcfda6cd672762c0fc96683d3c9b0b8229097052e3cbd8fffbdacba728b5f97a01fe08317cad5c7bcdc1f10c09cf603
SSDEEP

12288:CvV+s1bSQT6tjjdB4SE4uryvTAed4aI6Qt2Pli/LwNEMz8X5HlKtxp5udJF5VOz:CtMLuwTAeeaI6A/LuAXaIJPVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Slip.exe

Files

Payment Slip.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 716KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ