Payment Slip[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Slip.exe
Size

700KB
MD5

813197e4b88a84169acefa66e7d8b223
SHA1

2c0ebf421f40fabe42a4c00f906f20fc98870e6f
SHA256

6b100ecd69eca03ff9f39f370faedb6699a873af537b0e5f0491ef79d74c0cef
SHA512

5240f8ec247021dde4c8ac502a59c41fcf4000e3c538f1b8e4170b9edace028803b6342045aceb73fc38ec9e5370f07e9ffa888e246dc7e14628df18673b2de4
SSDEEP

12288:ocJAckjZjcLQvtGD+8d/1Dd74mmdcMpu27YIasgTsh/:Xk+LQvtk+8d/1dku86s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Slip.exe

Files

Payment Slip.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ