PAYMENT SLIP[.]zip | Triage

Sharing

General

Target

PAYMENT SLIP.zip
Size

482KB
MD5

9fcffa011884c89f90995a7f21402bf7
SHA1

ebd6c0e2fcb367efe68dd522654a733862e04985
SHA256

65ca0cf06f609752a0a82f476294bdadf4a849aa8b466495146558a6cee427c2
SHA512

c9402be40cf4f7e3185287e8ac2acf38af417f2001030b1098c90914f9a5c8725a673a154a82056c29bbb5eb48cc749e344277e234c4990b480bcbd3c9091422
SSDEEP

12288:SPpnUKAmTsflOz6eJlY8F3WeJcJ2j0ODWAg2q:4lmlO28lY8dLpj0LB2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT SLIP.exe

Files

PAYMENT SLIP.zip
.zip
PAYMENT SLIP.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ