Payment Advice 60931570[.]exe | Triage

Sharing

General

Target

Payment Advice 60931570.exe
Size

625KB
MD5

e1e225d0add93d2eac73881831c32920
SHA1

7aedde7bf944f044fa29dc5ca163414b0bd5c636
SHA256

3a5b617a7c6708d38d1b4bf20e3898487e7e311d97ecfd05b2edb2d564b2ffc1
SHA512

a7577604d568774e3b5fa6dea622e13a426165abb2e8f217a6a456b49ac5091b6489a9ad7d172c209809ed5ac36e613f3322d1a8ec306e935d6effcb70626996
SSDEEP

12288:f7tPplTY6RhKuD1DaBEoEp7gXRDAwxrHkh0M2sC8sUoq8Md/h:f7JTDEmTPeDA4Eh0D9Hq7d5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Advice 60931570.exe

Files

Payment Advice 60931570.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ