4e355c8276b81d54e8e123c414a5388b1ccbe11d68fffd0609fda95ac48bc849 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e355c8276b81d54e8e123c414a5388b1ccbe11d68fffd0609fda95ac48bc849
Size

663KB
MD5

e1b8245f29bbf27a6bee1b519a2dc397
SHA1

d030a6fae356e165ba7e66c4f681464abe428dea
SHA256

4e355c8276b81d54e8e123c414a5388b1ccbe11d68fffd0609fda95ac48bc849
SHA512

a13cf642c050b9e83fd6dcad6584bd36b30c5e684df02a0a21a07da1cffc0245eb52984e23d71a9aedf7f0a5ea459170ea75420fefd79f72904c73593fe7fe2c
SSDEEP

12288:6FjtYgz2EL/XIcGhhbwxxyJlYzagAstfPCd0c96cyVwTOxq:6ZtYguDhdY3AcHcYEmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/payment slip.exe

Files

4e355c8276b81d54e8e123c414a5388b1ccbe11d68fffd0609fda95ac48bc849
.rar
payment slip.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jRxH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ