General

  • Target
    receipt.exe
  • Size 2.0MB
  • Sample240530-netrdafd8x
  • SHA256 68535d5ca02f0c0bbd40b4ec132111abcb835945095498bb6c5eec282042818f
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • receipt.exe
    .exe 2.0MB
  • $INTERNET_CACHE/Accidents
    18KB
  • $INTERNET_CACHE/Activists
    57KB
  • $INTERNET_CACHE/Adrian
    11KB
  • $INTERNET_CACHE/Alarm
    668B
  • $INTERNET_CACHE/America
    41KB
  • $INTERNET_CACHE/Appearance
    52KB
  • $INTERNET_CACHE/Asked
    138KB
  • $INTERNET_CACHE/Bomb
    24KB
  • $INTERNET_CACHE/Calvin
    53KB
  • $INTERNET_CACHE/Education
    53KB
  • $INTERNET_CACHE/Empty
    5KB
  • $INTERNET_CACHE/Endorsement
    44KB
  • $INTERNET_CACHE/Environments
    45KB
  • $INTERNET_CACHE/Fr
    17KB
  • $INTERNET_CACHE/Gr
    13KB
  • $INTERNET_CACHE/Grocery
    19KB
  • $INTERNET_CACHE/Heart
    67KB
  • $INTERNET_CACHE/Identified
    47KB
  • $INTERNET_CACHE/Information
    36KB
  • $INTERNET_CACHE/Jamaica
    24KB
  • $INTERNET_CACHE/Lesbian
    23KB
  • $INTERNET_CACHE/Me
    10KB
  • $INTERNET_CACHE/Measurements
    41KB
  • $INTERNET_CACHE/Numerical
    39KB
  • $INTERNET_CACHE/Persistent
    36KB
  • $INTERNET_CACHE/Planned
    53KB
  • $INTERNET_CACHE/Report
    31KB
  • $INTERNET_CACHE/Rogers
    36KB
  • $INTERNET_CACHE/Sealed
    11KB
  • $INTERNET_CACHE/Seek
    175B
  • $INTERNET_CACHE/Spring
    6KB
  • $INTERNET_CACHE/Weeks
    24KB
  • $INTERNET_CACHE/Wma
    62KB

receipt.exe

  • IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
  • SHA256 68535d5ca02f0c0bbd40b4ec132111abcb835945095498bb6c5eec282042818f
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13931
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths