Transaction Notification[.]exe | Triage

Sharing

General

Target

Transaction Notification.exe
Size

478KB
MD5

115601c7539bec143f7a78ab15e9690e
SHA1

df4012b5101c84dd3f2547255bd95a25a3fb1e47
SHA256

2998cbe4e07c4aab6a9b58891e6823fa52f11cbcf49bdbc39b25b118abb24e4f
SHA512

09b0f77cc897d1cc526b96d01adb5063db088efca2683d95a56cd20d53290db1b4c3b37d4fe86ee1c2e7dab6910bacb8cf69f61186e7a225cf0d09de7e29c902
SSDEEP

6144:s6wA9s0fkKyYbeyBk8oLOARUDUFJ/P0VI+26rvluuTHxgzoBlEFAj5bXZYW3wRio:hRwFMItqoupj5bpz3gip4DDxqfhDNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Transaction Notification.exe

Files

Transaction Notification.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ