Payment-pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment-pdf.exe
Size

639KB
MD5

40fab60ce4c5f1bc76d9e0cfb0e8463d
SHA1

3311ae3eacc0dfb82e797e68e435225ed964efc8
SHA256

9794129ab61b8520756c9ef1a6ae7645dc0f909c44b934c50d46aae78f3d681e
SHA512

1da46c44f7b0e4bcdb2c35e574ab854cebed9604be3388dcde18e7a1301a419a950f20dbe1ec87ddf728d831564f7dc6c960fd1a6de3c1276db23c76cfdc7ab7
SSDEEP

12288:G2iN/qDadHGUU8n7SA4LPucMTCpuGImCvslTU5xs8X4G0o:G1hqmHG+n7SAMPuLhGIRGTUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment-pdf.exe

Files

Payment-pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ