Payment copy[.]exe | Triage

Sharing

General

Target

Payment copy.exe
Size

948KB
MD5

b7a6ca258cb780f735090ba00802cd12
SHA1

9e3bfd9d546dee99434e7f228e96c8ea4179f579
SHA256

649cbde56fbdaf2f52343c1c584fbe1357cf4be19264d7f31a21a6c7078ecf18
SHA512

d82ac12df4447ba4548ac3c208ce47695445573c162ceb209a91df9b2cf29297fb0855f77f345272aba0c3d327bd7efe1d3f1e03043299c3bc6159ea9cde8a3a
SSDEEP

12288:qotzb+w6dJ1Nyeo+T5Qfssbe+SvpqnvGj7jlKUo7FrpHl7s9edPJi08ygYeEp:PtH+L9Xoe5/2SRqvGjbovl7s9eD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment copy.exe

Files

Payment copy.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 760KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ