Payment Slip[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Slip.exe
Size

646KB
MD5

7d19fb3c53bfb1617df52b6c0337edb6
SHA1

e0a4f4eced1b355087f47abd362f100219687879
SHA256

d6b3ea591c73496b2cdb51d1926cb96859c2e1df09d7ec3447dc866ffcd6d55b
SHA512

65b7d4ebcda3c43ccf6a8aebf9b656199c77894d29383167eb8a3b8c9954ae32f7a5ac44ae5dc00f54142535a5a4b24974c2b90bd228f800d08377714542d060
SSDEEP

12288:2cdx6X60x47upJP1VPFlD5nRtrLRH2DYbPs7qUgynTnWBsoxK8/t9G9YM:2cdR7upVzPzvNZtA7hg+TW0Ys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Slip.exe

Files

Payment Slip.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ