قسيمة الدفع[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

قسيمة الدفع.exe
Size

1.3MB
MD5

e5a757d16cca40c02a7e95edc2705f99
SHA1

e45ad62296b952c06e4bc096b32854299e3afbca
SHA256

8162b511af920d0e256c6825cabebb94a84faf96f2de6ca032fe4b864844ca3c
SHA512

09d1817d3326ba4c7fe28448d4e0539c226a299c799b0ef6fc95ec0bbf9dd5d28986253c30cf68c2897932d0358d845073da03aebcbc2d9d719e8aefc0665c63
SSDEEP

12288:c5t/v7+A/09ZkhGHXqMFa+alVhLNa2BN9hxyk8Sw2zywWEmucx1odCbf9K:9UuWTN+aJLNFR4f+yFNodCbfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
قسيمة الدفع.exe

Files

قسيمة الدفع.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ