PAYMENT RECEIPT[.]rar | Triage

Sharing

General

Target

PAYMENT RECEIPT.rar
Size

598KB
MD5

d9932f6e05c8f6103a78d4f50c05b835
SHA1

d6c7209f923f8e124e1074fa4a66dbf3c79a7f0a
SHA256

30863b24acb27c8d8c0a73e7a4c40c14a3c3191bf8535012b25e3527d6a1285f
SHA512

1e2cda69864c5eab7e3e9373a4bf9a19e008582d1f241a6b74d7fd1702382ab670891561f7fa81b97262a874e5540e69e03d97b9809016c033cfd800ecb72cdf
SSDEEP

12288:k2gscTzLLhCkCJw7+8YPFr145Uc1vqmpJ4rATk579WfXRTzTEZ8tuQYYfab:keaznCJwHii59RqH5RWfXXtUYyb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT RECEIPT.exe

Files

PAYMENT RECEIPT.rar
.rar
PAYMENT RECEIPT.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 607KB - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ