Payment Slip Scan[.]zip[.]001 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Slip Scan.zip.001
Size

613KB
MD5

ca6769b031eda354d8799d61405bf8ba
SHA1

cffd0ea6246b62da50c160734350117adcc5be55
SHA256

2c24902d806183712cd689df503506e5209d1a91afd351e1546a7a3158d75caa
SHA512

20528b287316ae1f5593f7022b4e8ebe1c0d33d50c9ce83c06f3cdcd8a0d93a628a402265cf3c820abe7728b63d808c2ac546947f751e075032c2128d63d63a5
SSDEEP

12288:eJfBwFluMQd65LABwIKpbcoKMc421L8skN/vn+b8GqP3v4Od2:Ofpd65L6oKMct1pOH+4f4Y2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Slip Scan.exe

Files

Payment Slip Scan.zip.001
.zip
Payment Slip Scan.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BkIT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ