3721b2745c47a6a9bc5e267267e0a0e2282cb474decf20ea9d0b26bbf1d2b050

General

Target

3721b2745c47a6a9bc5e267267e0a0e2282cb474decf20ea9d0b26bbf1d2b050
Size

699KB
MD5

3281ff0ff9b045d39932186ec5f9cc3f
SHA1

bb54b3e2c5f6ca577773c6ec4494f1cc7bfae13f
SHA256

3721b2745c47a6a9bc5e267267e0a0e2282cb474decf20ea9d0b26bbf1d2b050
SHA512

9c781f54b5d4572b7864160719b780003114275474601c69727083a31695599b4e1386fbdb617f3a2c9933557e7e613a3c60660887cbb95570c7c8c2d89dadd3
SSDEEP

12288:kvMpofJQXYNgmB0a+HLdV9/NmbSXlzIp2auAtVTZAAMVAWRiPMUyaOEkQKXgMnt:kkuBVrB0aILT1NmulE4a5tVaAMfF2OEg

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/payment_copy.bin

3721b2745c47a6a9bc5e267267e0a0e2282cb474decf20ea9d0b26bbf1d2b050
.zip

Password: infected
payment_copy.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 833KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ