Confirmación de pago1[.]exe | Triage

Sharing

General

Target

Confirmación de pago1.exe
Size

956KB
MD5

43cb0ab95c193e4c0929aca7fbd6589e
SHA1

ad6e821b83255801ddde3fe162c7a8e93abe5c33
SHA256

5bbf73a1e1f6bd7fa7885fc8e052e36920d9ac928b97ca9db978676664a2a064
SHA512

2c0c14ec714e1b1bbaeec624a8a6899ee8454e1c6b6350bc43c2168adf1aff544763864ed7177d97bbbb53c8205daa2549b45d5fe2663bce19cb6f4447d0d4f1
SSDEEP

12288:jzjLf30WH0mkPStI1lRHIZAtGW1wTlnKhKKKNbi3mw:fjj0yYx3dCAMbiP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Confirmación de pago1.exe

Files

Confirmación de pago1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BVRt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ