Payment Advice[.]exe | Triage

Sharing

General

Target

Payment Advice.exe
Size

630KB
MD5

4cc0699cfa272fb4881897088904a707
SHA1

9eb4ec0073ca8524de1c945911753b200ac8dc31
SHA256

b557e372c22db30990fad3e3226c4ab649d96b40170cb8890ba401d6ec0f3cc6
SHA512

09f7716e8b54599ad2b2c550c2673952c5c18e60a579e200ec964a20c4816f4e6f7f7b59a4cbbef500374794b5efce0ec910b5f9712a9f31f0813eb10e37ab29
SSDEEP

12288:rRoBU3YnE/eoa5D4wu5oOeEVZ6F197m04du9SKf5GW4k8LuaTShorEZ:eBJnfoTwA5rVM1odafD4kmTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Advice.exe

Files

Payment Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jhXq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ