Static task
static1
Behavioral task
behavioral1
Sample
Payment details.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Payment details.exe
Resource
win10v2004-20240419-en
General
-
Target
798dd6a52dfad4bbea1eac8d2006e7ff.bin
-
Size
653KB
-
MD5
e6b961420e339db2effb2800960329f6
-
SHA1
35bf5e24ee7c8ed0ddafff48b4646f2591a1d82c
-
SHA256
30e74b7dfe9e162a7df007407aee82d84119750c8acf706a7e1c7dd671b61f98
-
SHA512
d39572e33bcb28db7413903f64b29b1ea0bc604ef8af7c622881708a5c6c8537a901e9e3ee6642b41577df6b223ab76e28fe4f86792bd097515f4170f7afa6b7
-
SSDEEP
12288:VKY4lpYcahdfsdQQweN1BtoA4IxfSfYVMlUGd6N7Ln+8ZKDErOvOGrpK3czkUH:VdIbaYe3eNWPiuYClUQ6JXyEQOqzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/Payment details.exe
Files
-
798dd6a52dfad4bbea1eac8d2006e7ff.bin.zip
Password: infected
-
b1aa0a9cd2e8e5a9612ada324e8de5341d4804e58787caad4278527704df606c.zip.zip
Password: infected
-
Payment details.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 703KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ