payment[.]scr[.]exe | Triage

Sharing

General

Target

payment.scr.exe
Size

775KB
MD5

52195b326cf4f448c54616638688e4da
SHA1

ac20f1e7426e40d4eadb7f9749803f1af28b903f
SHA256

ef192b1102458ebc5f960e9569c94194df651723e7eb514093f2bdad4c82a5f1
SHA512

f2d42e1cba1c05dd3e915d077277fbcafefc20cad8f209cd35a8f521b560426957e2b2338b3758364ba62696b7fdad506c19faf64052ca88ded238a0af9f1069
SSDEEP

24576:BB9uwTftd0rZK/ukKwkvOm9crJIB/WUWU4:5uufjEYNILcda/WUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment.scr.exe

Files

payment.scr.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ