Payment Advice[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Advice.pdf.exe
Size

695KB
MD5

46e1fb5a1c2457674b6dfda99c0fb107
SHA1

ffe308ed7a4f05211b878cf84b904f917cb176cc
SHA256

a0b74913442dd2c0e73713704b13161df10d73da85813acebea3885f77ae7733
SHA512

41c6fc379fdf9449f1ec905e2535864253e9d9465812b13fc7f6ad156b60425e5ad482e5acc79c60f92257e9b756fc4082bfccba604eb3bde911b97f96853521
SSDEEP

12288:P2iNzeWFm+3lwzQ1wmSh/MT2F5tEndycVxbiJRpqii5yo2dqA2stiCTcAH0z64d8:P1tRFm+3lSQ1wNZ5S7Vxbi594RRAjpf1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Advice.pdf.exe

Files

Payment Advice.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VvIq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ