Payment_Advice-pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment_Advice-pdf.exe
Size

696KB
MD5

40b59fee3bd6781b315daa14ce715ed6
SHA1

291d69513ad0cb0f7150f4ca179b3afff5e4a82b
SHA256

29ea0b3b1041cf6bf92a928e9571e6de0c9ac34c2b05874971b199a99b8a4b5a
SHA512

74d0650cddb41df83cc596952cab40a2e1becaa2ee254f7711adf59bcf6d5dbe8ef6df143899f9888d26c417ec4942d76ae90c56f423342077e73d1824cdc40b
SSDEEP

12288:hohDhagHCN1J905lWTu3dc4wdt3a2kt+bKDbaGpVGpyg17v0zlIoVih:ehDhagq1J9ACtoIb8bDpV7g17szl1Vih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment_Advice-pdf.exe

Files

Payment_Advice-pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ