payment copy$10,200[.]exe | Triage

Sharing

General

Target

payment copy$10,200.exe
Size

812KB
MD5

bbed573d2d2ee2f04d010ce998a5fe46
SHA1

74a32deb53c80e093b0a339ac6b72378669b2ac3
SHA256

25bcdc2a0b67ac391f676b51e55bf74c686eba2fd04ee074b5a7f1af9610e864
SHA512

3c515093b356024e0d6dd904883e00f87704bbdd34fbc0f25b8ecf0cef28abf4692fcafd04d1d1675955f32997036dac177902aab7151154f8fb33bd7107b167
SSDEEP

12288:glKnu4EXqXdVi5h1dIoTgCwb6r4O0VxD97UXYpctJrG1aaBriTw3k:F14qXdVibNTYb9O0VxDScGE1pBGTw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment copy$10,200.exe

Files

payment copy$10,200.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 796KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ