Payment Clarification 009475[.]exe | Triage

Sharing

General

Target

Payment Clarification 009475.exe
Size

679KB
MD5

335679582645aabe658a6aef4067caa0
SHA1

45378dff6bd5c9f80e5ed309baec90c001f22052
SHA256

d24759c2da85654f95e71923c3b6a4ed23aee296e4fd70f436ee3bfa190647c4
SHA512

b96903b9f70c89f38dc25d85e5b7e0f03e49b8ff7cc746c9b6f1f79044269f222a704ebac9d5b03b64038ce23931acfa103f3322c98ac82e1a645a9987c59c60
SSDEEP

12288:eYeEePswecl9dS0D+izGP+PM/bqR05NGAQ+56SZvgKiCxpspb91qSZl:xweQT6iqYwGr+5LvOhtZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment Clarification 009475.exe

Files

Payment Clarification 009475.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ