Payment advice[.]exe | Triage

Sharing

General

Target

Payment advice.exe
Size

799KB
MD5

49079ac0eb13830fd48b9f353bbd4c9e
SHA1

3d36e3f0b6e1d36b5ccfd89bd5055bdff734acde
SHA256

e75ec9b02e3f93018f0bac4d8195e6771037b0754e45032c470db2d648fd9bf5
SHA512

8e13e1fd7e26bd1fa6cd5172cae327e100f74f49ad9961c686db140fdfd2e22da790547a99dd5d259aaf99cf4814d5ee7691b62f5bfe32210b262664ac1b5e02
SSDEEP

24576:asDF15dckB3rE/EwChg+x6mDyKifILX5zjauRC4:nxmkq/f8gQZi4JfRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment advice.exe

Files

Payment advice.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 797KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ