Payment Advice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Advice.exe
Size

759KB
MD5

fc88d3da0f84dc02777529f7faa811b9
SHA1

8bbef3010f6b83cbdae8f82d1823692f0b7649df
SHA256

bc28e3e93f930d14d3405067cae6a5960a6bc4f7c8cc58dd3204f6e2634c1f8a
SHA512

de4b1cbb271c10067cb6c2784f71520b5a17d658e6cb11d10235b668128cf0fd585890e60e8985e784364e449006361149e75c43bbc659bbd7cabc0919b97bac
SSDEEP

12288:TBa/mFiTEJ0+0OR8FCko3o/WX3VOiaaRW//hucE+lih6dTE8RSASswdxmJfIC9ot:yeXRRUUqK8RSA4dxmqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Advice.exe

Files

Payment Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ