bbe00988bde9e9521a7349c34e7434c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbe00988bde9e9521a7349c34e7434c8
Size

506KB
MD5

bbe00988bde9e9521a7349c34e7434c8
SHA1

a2a31c05d0c80e77f26c4af726e9b066ba2f8a82
SHA256

900a2c3d53f1ab70cc78952e8067aa1578cd0f7c137e59d0e591e823e89e1e2f
SHA512

e9c74a2f7e965ed1569032690cda0e1b6b7f6af74b4e357172e372448f2ff4c43ba5d7fd2a51d7b12dd2c05f2a26e60d2ba2c51d08b91582d6417078135c7099
SSDEEP

12288:UJm97a3lipt3+JSZCahpYRP42Ix1vKuoudmOT2HDNUPZ7Legh:cXl0tWSYRQ2Ix1vwudmOTfPZlh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Slip.exe

Files

bbe00988bde9e9521a7349c34e7434c8
.rar
Payment Slip.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ