bank payment[.]exe | Triage

Sharing

General

Target

bank payment.exe
Size

795KB
MD5

8a0181065ae802c6287f6bafc2dfc8f9
SHA1

6835d56a0ca6c3db993a51cf4629fd36a40dc58a
SHA256

65af772e03925fe6f08f4da235d1b7d529fc36ddfdfb4648276431f94cda0636
SHA512

8f5370268e7fa8e097312fd7008048ea38a38c12eb4c3ad07386bef56baa8201f9673828e2e8626144cebeb2085b59e713b95032ad1a164482dc9f4ff475ef08
SSDEEP

12288:lt7teop6tph15QaS458CkLSgZUu5C2tNexrdgdnVSlWLj825txnm0zQJefU9G:lt55p6tplF5PkNZfLNeJlWLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bank payment.exe

Files

bank payment.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 726KB - Virtual size: 726KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ