1b8fa4375102f3f52cd1b6ea49d5c6bfff86e1fcbc1667636f8c0dc4a32521b3 | Triage

Sharing

General

Target

1b8fa4375102f3f52cd1b6ea49d5c6bfff86e1fcbc1667636f8c0dc4a32521b3
Size

635KB
MD5

a5b68081f0ac7cbada18a3e26440558d
SHA1

cc46e57faf91e207b9705dc09cef9d41ed02e039
SHA256

1b8fa4375102f3f52cd1b6ea49d5c6bfff86e1fcbc1667636f8c0dc4a32521b3
SHA512

214295a61a35344ae2f35dc26eed0ddaf03ba7d433183fe6dd87397728fe230047b53c2fa7aa3d6bd3b3f90ab7b8c6a7f1e0808ef9b15f6fc54e32755caa9e74
SSDEEP

12288:dQ6cZhfqnQ2HJCC3tE2irgdnCkPTSyQD6FVO5bngYExXeBosl/:siQQJCsE2i0AJeFVONoZIosl/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Advice.exe

Files

1b8fa4375102f3f52cd1b6ea49d5c6bfff86e1fcbc1667636f8c0dc4a32521b3
.zip
Payment Advice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ