payment[.]scr[.]exe

General

Target
payment.scr.exe
Size 959KB
Sample241128-kczytsxpcl
SHA256 e24e077209f55ddcb0f46752a095fdfbde8e7ae0a46d9c2ffc750ff57767f2b6
MD5 8c06dff18292da4571e704a3cdcf4330
SHA1 6714d9346100cd3d0bdc1650a6a78aa43bd01673
SHA512 0ceae04d6bdad72e892bbf527e0d89dd7ad21edb08d0b41960256eda10bb09c4cfbe9d77cb4f9ca902aa1bd38402c3df629bf0fda7b75cce640b31eadd3bd734
SSDEEP 24576:p1zGUxjBubFm4Z3Kj/+9ADLVaCvStp7hGC/T9ff:DLTu8G3A/+9QR7vOpb9f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment.scr.exe

File Explorer

payment.scr.exe

.exe 959KB

payment.scr.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e24e077209f55ddcb0f46752a095fdfbde8e7ae0a46d9c2ffc750ff57767f2b6
MD5 8c06dff18292da4571e704a3cdcf4330
SHA1 6714d9346100cd3d0bdc1650a6a78aa43bd01673
SHA512 0ceae04d6bdad72e892bbf527e0d89dd7ad21edb08d0b41960256eda10bb09c4cfbe9d77cb4f9ca902aa1bd38402c3df629bf0fda7b75cce640b31eadd3bd734
SSDEEP 24576:p1zGUxjBubFm4Z3Kj/+9ADLVaCvStp7hGC/T9ff:DLTu8G3A/+9QR7vOpb9f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

987902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

pvRo.pdb

payment.scr.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

payment.scr.exe

mscoree

dotnet