PAYMENT CONFIRMATION[.]exe | Triage

Sharing

General

Target

PAYMENT CONFIRMATION.exe
Size

751KB
MD5

f2390147b225e560a2840de045652e3a
SHA1

fd723e9065b971729c5dd0a23e78c60f79ea315c
SHA256

12d37f94ebe64d74e7cc1a4290af6797832b512a223d03d410171f47cd979065
SHA512

86d8eac7588b0980c20b20ba77679e8b548cfb9c92fdefc9243cb391641dec7f7a0b527f6d38df1449619462ec06e0d8503ba39a8b939d7c5b1f47cde6d1f741
SSDEEP

12288:+d6L7PVXfliybhaDnLMzIL2q+RTdOL8I60XtWsi/PmAF+EMQBJxLzspsCITl5epN:/OyqGUL8IrtijRze/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PAYMENT CONFIRMATION.exe

Files

PAYMENT CONFIRMATION.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 742KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ