Payment Receipt[.]exe | Triage

Sharing

General

Target

Payment Receipt.exe
Size

846KB
MD5

4bb77e30a2cea771b1bda6ac99c4e19e
SHA1

b1bc299bb977c2732a93062903f70cb06c24a085
SHA256

77579d66a9a588f82d409def94002c74fad7729abf83d63388ce897b66b50804
SHA512

270c03ed9eee2068f7421198d5fa90584689d1e7b1a07c4e91702b1d864bb45f7e6b6c01f6327b2047094851086cd1b0bb07c172534c693a3ecc7e95358cae44
SSDEEP

12288:JVpBmiET9+jRl7DQuq9hUYnHmVam1FtI7DrCnboL7Q++448NCUcYuS9:uy9QrhPGVFICnbZ+Xj8Uj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Receipt.exe

Files

Payment Receipt.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 777KB - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ