Zahlungsbeleg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Zahlungsbeleg.exe
Size

717KB
MD5

403771edb8c4ec626198dd031da28612
SHA1

80182186863ff565a0e9f43ee9c7c5572ac224d0
SHA256

36570a66439108b5e63bb142c2f4f0aa3f998301d56b79f393b10f069e34b987
SHA512

3a82ce57fcf6b23f13e4a8f9b4815122b9e9f903e2f5ce0c6a42bf0abfbe08d17d292d417a9136c3a5fda827a8fd535a76c9ada839b8607e2f4e806f91483940
SSDEEP

12288:fIrjM5uxjcrWsUPEfIifqe8ES2FUp1yL1u3qDhRy5jqXCne0:fIr0w2IPEIbDE2j4CnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zahlungsbeleg.exe

Files

Zahlungsbeleg.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ