z14Paymentslip[.]exe | Triage

Sharing

General

Target

z14Paymentslip.exe
Size

817KB
MD5

81da76a7e4b619e988cbe3cbfb3783c2
SHA1

da5d854bba2db9385459699a32487a43a03b54e6
SHA256

c672b9f17d0f36dfd43f786dda0bacfc288600734c81f10fead1818430fd00f6
SHA512

dd983f8df21a55902db4d8c26424b2e5b98f4640862550a688835c79a3cddcd068348ddfaae5a32e3b8016481434212bed55037c20d1a618123f37f9401450ec
SSDEEP

12288:zRc7xHVf6EOA9J261LAPKEoUf47FE+y0q8:lYxM/QqKEJg5E+9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z14Paymentslip.exe

Files

z14Paymentslip.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ