Payment Advice - Advice Ref = GLV407423235[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Advice - Advice Ref = GLV407423235.exe
Size

414KB
MD5

a6e287cb43f4753422a682cdab8291ce
SHA1

80328e4fa2785338862f09711b6859b8c6ce4b00
SHA256

ddac9d6b463e3ffd0e6e99b798801520b14a62532ae0a510231208919597325d
SHA512

a0bcbb53487635a0f744b68fee85c21992f3ea2b32c818ab6721be2ff6dffdb6e7cb0a8268422a3957ed37dac0fc3a559631084327f87755520516eb2657e8c2
SSDEEP

6144:mDmad57XeYl33j3bx690gbBhKlzF70EpchWPx/xmUdodV1XQH0h6gtKsV0oTjHwk:mKW6KeKlzF7R2Kx/RR+tvVvsnUJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Advice - Advice Ref = GLV407423235.exe

Files

Payment Advice - Advice Ref = GLV407423235.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ