b0a3efce958d8675af7090452f72850dfeae9acab241c235a26287c14810b41b | Triage

Sharing

General

Target

b0a3efce958d8675af7090452f72850dfeae9acab241c235a26287c14810b41b
Size

713KB
MD5

e874008f9e2d652e3baf69766d808239
SHA1

0048a70648af320f3c455b00b7ce3edbdc5095ac
SHA256

b0a3efce958d8675af7090452f72850dfeae9acab241c235a26287c14810b41b
SHA512

32763264603ecb8a0becdfea3de285b6d9aa655282c42d11eae8e2577e3f94fd0158814ed7142bc650d988b555221dd4148c1538bd5770abef3d514a8def7965
SSDEEP

12288:+9K7dskSy6lJjs7YJM86UD6jv6Vx1cbHZe5UGstETsBT2HMia0wboy1TOb:6K7dJSVU062xWZL5EwBT2spk+Ty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proof_of_Payment_400176937669265.exe

Files

b0a3efce958d8675af7090452f72850dfeae9acab241c235a26287c14810b41b
.zip
Proof_of_Payment_400176937669265.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HoSb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 816KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ