e4598c7dc0adfa33b9140a385eab0350046c5b3433c0da676a5510803b9285c4[.]zip | Triage

Sharing

General

Target

e4598c7dc0adfa33b9140a385eab0350046c5b3433c0da676a5510803b9285c4.zip
Size

1.5MB
MD5

b1df3cc35dc8793983b682f64d5529a4
SHA1

3ebcf66c1fc288b32108b09f3edc2ef8bc4307db
SHA256

e4598c7dc0adfa33b9140a385eab0350046c5b3433c0da676a5510803b9285c4
SHA512

7713e0f9e5e61299db3a1b33c68bc744b292f859e0800251a6d82bab910dfb14ce35d9a74d67e52bebfd5de0e19348eaabc91a37efc9c86563141d7b459e0842
SSDEEP

12288:7H7PW6OKVad7DLUrDfbUxMK1J8BgzaBq/WTy05X4AcdGNoP9:T7auaNDuDTUxZFeBZN5X42Nm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Confirmation.exe

Files

e4598c7dc0adfa33b9140a385eab0350046c5b3433c0da676a5510803b9285c4.zip
.zip
Payment Confirmation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ