Payment Confirmation copy[.]pif[.]exe

General

Target
Payment Confirmation copy.pif.exe
Size 1.0MB
Sample240801-qhsdtswfpf
SHA256 3f084903c5b689b3d88e36e524bd3fcbda689a2b6d2446b8b10fbd97b145db7a
MD5 d4f785d1d58e71fb1f732558508aa612
SHA1 f8986748df38721aaf18eb48b693a32b748eeb2f
SHA512 615f36a3a0e5d0c29f7443a477bc8efa3fed93184a1cd8ceebf29309062642018b35a0d31c058a84cb38f0c8257eb2a48eb401ce372ceab5afd1a14914611522
SSDEEP 24576:Wmt1c89pW6ztD2bnJms4q/593/K981aeL:hKoBAnJj/L/+8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Confirmation copy.pif.exe

File Explorer

Payment Confirmation copy.pif.exe

.exe 1.0MB

Payment Confirmation copy.pif.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3f084903c5b689b3d88e36e524bd3fcbda689a2b6d2446b8b10fbd97b145db7a
MD5 d4f785d1d58e71fb1f732558508aa612
SHA1 f8986748df38721aaf18eb48b693a32b748eeb2f
SHA512 615f36a3a0e5d0c29f7443a477bc8efa3fed93184a1cd8ceebf29309062642018b35a0d31c058a84cb38f0c8257eb2a48eb401ce372ceab5afd1a14914611522
SSDEEP 24576:Wmt1c89pW6ztD2bnJms4q/593/K981aeL:hKoBAnJj/L/+8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1059494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

YOSlQZ.pdb

Payment Confirmation copy.pif.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Payment Confirmation copy.pif.exe

mscoree

dotnet