Payment_confirmation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment_confirmation.exe
Size

893KB
MD5

dd73709f2f213c8f63b74d05e37132b5
SHA1

c2e556cb2e6cf363fda2e2660853b6732290fe33
SHA256

4ab10d5cd36b812cebe488d54250014cf4b363a61fcd3a32b318a19b2d774d7e
SHA512

679eae418cc5c5cf07030cf4b8db854e2bf8aa3ebca1e09354101395d8f4cebb65af4905a8a3cfd5687a5e3a85996d22dd41a17facf5ad806378cec0e2e2def5
SSDEEP

12288:NTVd77cVpSRj221r4Nt5461MXcw3d0bBA74MHUK7ds/VtbDUsvExOaoLaq/w:bJ7ipYjXraI5d0lA74Uy/bYzOyq/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment_confirmation.exe

Files

Payment_confirmation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 891KB - Virtual size: 891KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ