Invptapayment19032024[.]exe | Triage

Sharing

General

Target

Invptapayment19032024.exe
Size

617KB
MD5

9da1c1003343966cb14acd150070a54f
SHA1

6bdb294279f50e4e6ad270664c9733acd4d586de
SHA256

3a93ebec868141d7e6d804c825c79934f5db6b72825c74635b9f6c0f98217b76
SHA512

09f09459ec7ef3b4fa777b3ce2a30ec385cea44878d9ee02c91fcb06f2f32199534b15d1020605c27e1e3b6e801f38a19a528728882f554f56a4314bb2a2bfef
SSDEEP

12288:JjWm+U8a9nFn6D+hbpZZMxInHoLnJK1dQPLeKS8VtMpOJRYWq:YmFnQ2b3uxInuJKrQzet83mOJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Invptapayment19032024.exe

Files

Invptapayment19032024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DwYe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ