proof of payment[.]pdf[.]exe | Triage

Sharing

General

Target

proof of payment.pdf.exe
Size

559KB
MD5

12a020044ef1ff75bfd860bcee9a3762
SHA1

77008edc365f7a4ad1b1be97c1ad4fc5e96869a5
SHA256

840c7c4082f868ca58dc61ce2fa6309ffcbc17c81fd82306eb6ea558eeeba7e2
SHA512

d7d32aa05253cf106d9d3e9e73c51f29366d7d66a58e1e7bfcd928e5b8ee0f2515fcbedd0ab867646edc891b5fef1a306bc8b399102cb7df808aaf6b269897b1
SSDEEP

6144:GCL+2ACrZFup6K1nS+mtiQTCXOgoX93+Tm7Tv7vnvnmc1pBWRWDSG:F26lLtiGaOg693+Tmnrvmc1pBWMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
proof of payment.pdf.exe

Files

proof of payment.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ