897a2a6c905eb684d234ef755f57ef51d44a9247b72b491f14f7b77ca765fc51 | Triage

Sharing

General

Target

897a2a6c905eb684d234ef755f57ef51d44a9247b72b491f14f7b77ca765fc51
Size

1.2MB
MD5

4d52e2f6f7dc2826f28bdec30c336eda
SHA1

f8d521e11cfbffcc60468a7c93307483af8ac5a2
SHA256

897a2a6c905eb684d234ef755f57ef51d44a9247b72b491f14f7b77ca765fc51
SHA512

ba540727cd0e98fe1bb0c3c8af3ca9e2e11063f515f7ad6e8677e43cfbdac9a0d87211c9a5d186208bc88128daa68018d8a65db427264c4fe44c9b90979b8300
SSDEEP

24576:M2A6GAXaxygltC5vo9o06e3oWMqCxtyLYm1Zb9CRqEJB4J/oU0n:M2AVrxa5vso06Rg3v3b9CRpJB4J/oH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Paymanet_Slip_pdf.exe

Files

897a2a6c905eb684d234ef755f57ef51d44a9247b72b491f14f7b77ca765fc51
.rar
Paymanet_Slip_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ