Receipt[.]exe | Triage

Sharing

General

Target

Receipt.exe
Size

330KB
MD5

4850a3faca58304bd1ed1e6f257770a9
SHA1

8d344bf330c120b972f279b691d2852d3d89c7d9
SHA256

05cd3a132abf900939da0da8053eca52743a0fed69b535ebdd4bbc6a76017697
SHA512

7a9532936edeab1920a6dd3b6215d0a9827fee58249811e633c9ff26e61cfc421d37804586392d2bb68a1c7470f8f833f368723d8114d598f319f6c00970587b
SSDEEP

1536:QbHWtAA1ChZAbExTJbNmJmuEIW0hUv8TPahU4fjfFJRlf3QT/ljmV1t6gVmN7:QbCAA1CwExTJbMkf50hsvDFcXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Receipt.exe

Files

Receipt.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ