payment[.]exe | Triage

Sharing

General

Target

payment.exe
Size

570KB
MD5

ea99574241f0d530ed58e13437af4bde
SHA1

ab348616432697b9ea4c44ef7e20c3c3ffdbd009
SHA256

c8fdf36a855d4ae5d92d6c6c85398960ca7cd6950763792e1ea8db28a1a3b824
SHA512

c82d1e96a5821827c8b481552860b1a419b46dbc58f5c84d1ccf8cae88885a2df9aa7131f36c69df08d116ec8b1082b306e8a23fa63a177a5b4464ae77cad9d9
SSDEEP

12288:hg8zS55mFz1kYPjglD3AWjvilKGt9MY30dogY48YGP/G/DdAAq:hgf55qF0lylxt9RUogY483HGhAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment.exe

Files

payment.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ