16bd8e013248fe195f21ebf636f487a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16bd8e013248fe195f21ebf636f487a4
Size

843KB
MD5

16bd8e013248fe195f21ebf636f487a4
SHA1

71db3e95d89af79a35bf32c10c31c9d1d4e648ba
SHA256

a03e69fe9fb248e69b292eca71aa7d843c813f170817974a9c35e088dae00160
SHA512

e65326ec138d8228fdb83f8884751a8b826b966ede9a8d30d9c19e67fb89bf3e3e0b41e666edf5037e5557b11804510b8963b11a2f917d48c4edad6cb5059439
SSDEEP

12288:VSiPFPlYhbVEMf1IDvuoQ+bjWGQP5RRh70XkTzn/e2RRdHH7dPQWbopCd/NRflNB:wiP12V3SDvuoQqMkGvxPQDC/NtaaVm0v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment_Advice.exe

Files

16bd8e013248fe195f21ebf636f487a4
.zip
Payment_Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 941KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ