PAYMENT_ADVICE_pdf[.]exe | Triage

Sharing

General

Target

PAYMENT_ADVICE_pdf.exe
Size

597KB
MD5

b71c0556ea5d14644690b615a2fdca5b
SHA1

fd5b16520dd3130936bd0ae28d11a2b70b6601ed
SHA256

987bb2748cb98b169046adc19157f2225896231e547d55298efaea4cc19331ab
SHA512

992361b12e3db0155291d1bf1da556d01bf7b651c516fb9baa3891e36c258a98e56b67c176f3349b1227db25ab28ee3cf73b407fe9ea2fabfa435ba231c13520
SSDEEP

12288:Z00WWObWEoJY60Uyqyxn9KxJBLUetCzd0LIPALhOTlwMW:h4fmTTyqYn9oWKLI80lh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PAYMENT_ADVICE_pdf.exe

Files

PAYMENT_ADVICE_pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 582KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ