061cc8008888c1fffa4770423aee8c6b04877677c5d5cdc03f0f204b008c7c19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

061cc8008888c1fffa4770423aee8c6b04877677c5d5cdc03f0f204b008c7c19
Size

620KB
MD5

920422af8f2bd594defeb6abd23cc9dd
SHA1

8bec53c95eb60468fce98c0dee1b9cdfe9fa19a3
SHA256

061cc8008888c1fffa4770423aee8c6b04877677c5d5cdc03f0f204b008c7c19
SHA512

be94b88f55ae614debc7fda8f98c24d0a55b63ecaccd612d5c166a8e58bc294f4905678f385ccd4b7499b1136b3c8baa46d8361504eef0e19d947f7863e36c01
SSDEEP

12288:XDzc/Dk4BhwpyFQL3NJvxTvF2qJMG4wbmazVitTM6hX/M1ec67Sg1XFUXVuUdKas:T4/g4HQL3zvJt2q6aCs4tT57SyVYMUw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment_Advice.exe

Files

061cc8008888c1fffa4770423aee8c6b04877677c5d5cdc03f0f204b008c7c19
.zip
Payment_Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 934KB - Virtual size: 934KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ