Payment Slip_SJJ023639úPDF[.]scr[.]exe | Triage

Sharing

General

Target

Payment Slip_SJJ023639úPDF.scr.exe
Size

163KB
MD5

7437a3e4149fcbeae7a68758b2834986
SHA1

a799bf651a1c4c0d9ec705b6e1d9ae5903fb1546
SHA256

27ffcd71286d5f2f958df742165ff8995288de83072b65d6415d1ed8db0a3aba
SHA512

7576dba8a912ac7ca61165285008a13eb8f69544de4e6f663e578ef14250f58296a78831d8a1f70752ac8d042d71b0dc2cd59217ccb2efa14df3a92dc1b1da46
SSDEEP

1536:GpuePk4jSYamBPGoy9lKPwMYtryr3B+oc5PpLciER4xD7HlrDh6zJT/+GXWprEB3:VTY690ppQKUD0zJTmkWpAay4kzwOCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Slip_SJJ023639úPDF.scr.exe

Files

Payment Slip_SJJ023639úPDF.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ