Payment Form for confirmation[.]iso | Triage

Sharing

General

Target

Payment Form for confirmation.iso
Size

1.2MB
MD5

5e5a505151c1898707ba919a45dc71cf
SHA1

8eb76d171dd22a6bb48b9adbb85b9713061afcf9
SHA256

c6e088402071431a2faf40c62fbc28f438cf98684820edde4d778f833d8921bb
SHA512

e176375a18b42a9dd8a684c5cbe5937b4c4f2fd56839b149029550ccb88db119649ecbc2f7f4d663af64da802f7c7ae8b4ce0f5ea2bd3bee0876567b3593e675
SSDEEP

12288:t9UHTp6Hg2vXZdlNn2cXHFMWQEjFDe4nhD30cyLtDtS18V5wybCd/rghUlmt3krf:MHVhoV2cXHU2hToSSCd/rgh6mt3k9p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Payment Slip05042024.exe

Files

Payment Form for confirmation.iso
.iso
out.iso
.iso
Payment Slip05042024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LbWe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ