TT Payment Notification[.]exe | Triage

Sharing

General

Target

TT Payment Notification.exe
Size

1.0MB
MD5

c5a9b61237999cdfa7fe133279519cc3
SHA1

1ce1740ecf5501b7577664485e259d5e98777cfa
SHA256

98e2dd7919a36f8a87e91c5d8ff372383f0ec656a07c4ec6c24e850703aab623
SHA512

749e292828a8b51ab1b5734d16d06a6d73c3b9fb3b9aa3c7cbd69f029bf266d4e6b420fbc650e236b37164bb0c52091a777292c718c8bf7cf2eadd3576fddc12
SSDEEP

12288:A3j+BBtnm3n0He9DlpzIpk1qaxbxQxkT4/rJw8flwykcnM9lPuTO47QpilQP/dUb:A6hBliLtIdE/DgXWHC3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TT Payment Notification.exe

Files

TT Payment Notification.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ