PaymentAdvice098---000098765456789876545678DOC[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PaymentAdvice098---000098765456789876545678DOC.7z
Size

621KB
MD5

462f9a2387d221dd957c06ec6a02387e
SHA1

928d9ac0a9af4f7c0ee63586c54b99c8351fb86e
SHA256

1d47cb904986b33fd62ce79d5db3bac3ec03a37218e5a6b9bcd896eb86c0a7bb
SHA512

2e53fdc6599140cbb548d270731e5d088710a23913faf5c83f17988be8ccbebf464980d8f850ecff30caf21cd0b2792a69bb8942c115989cfbeffe09c32455ea
SSDEEP

12288:xjMG6jW9MldUG5gr/c7Oyi8GvMNKpCOATsIY9ArZ4mWb:Jn6j2M/UEgWOa5c2pHF4mG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PaymentAdvice098---000098765456789876545678DOC.exe

Files

PaymentAdvice098---000098765456789876545678DOC.7z
.7z
PaymentAdvice098---000098765456789876545678DOC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 663KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ