39e32629ec8bbd2c23e5a818963cae13ab10de2facad12c0a7d9a774fe6d93e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39e32629ec8bbd2c23e5a818963cae13ab10de2facad12c0a7d9a774fe6d93e4
Size

478KB
MD5

12dc9346d821834c9ba453d45222787a
SHA1

76691604d16e9fd5bc3b4fb2859a63adb74a9bdb
SHA256

39e32629ec8bbd2c23e5a818963cae13ab10de2facad12c0a7d9a774fe6d93e4
SHA512

1f52246e9b34bfafba74d208745e3b340a76f62cbb1b862234ec2b638a9ae0f8d564caa854ebe4e534ca5a121ae3d5962da06c0fc410ac7c73ae2f561c9b9106
SSDEEP

12288:4on7GbTVRukVDzsTUUlRpcuQu9HjTWoJzLlIhuih0:4/VzhaGpu9HdZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT COPY.exe

Files

39e32629ec8bbd2c23e5a818963cae13ab10de2facad12c0a7d9a774fe6d93e4
.zip
PAYMENT COPY.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ