Scan- 00399905 Payment slip[.]exe | Triage

Sharing

General

Target

Scan- 00399905 Payment slip.exe
Size

932KB
MD5

acf267b0d4419caff6a79c43e1711b33
SHA1

eb9b5a73815bcf20a23d014d7623004dd06ca10d
SHA256

680c2a3691dc7babcf16daad934a2fe8efabb3214bf36f60825b708c7f736015
SHA512

9fa068f707c21bfaea4ee15a7c47a9992ac43d2fca8294038624964a150e0514eb6eb3133b77146fa531f67188d6e2a78543234ae81ffcfc4035aedc60141c8e
SSDEEP

12288:e1AP1l8h+SBPc5BniqSAP3dt6IO7dLakiEZMSdAs3evICb1ycUpthh:3l8h+SBSiqSAP3dt6IO7Ti3Sdpq1ycQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Scan- 00399905 Payment slip.exe

Files

Scan- 00399905 Payment slip.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YsIV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ