Static task
static1
Behavioral task
behavioral1
Sample
Payment relief form.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
Payment relief form.exe
Resource
win10v2004-en-20220112
General
-
Target
23393da095873755deffde7275dbd33f61b66e7e79af2ff8ee3352454c70b5d1
-
Size
296KB
-
MD5
82b886055f73aba6a42727a48c2397e1
-
SHA1
b13e300d941e9ac25f43642c3d3b3ca55a87a928
-
SHA256
23393da095873755deffde7275dbd33f61b66e7e79af2ff8ee3352454c70b5d1
-
SHA512
3bce43bab8d36fce5628bcb5b952f8fc551812035594dc715235c9f6d44e253154b8f5d6f8bca5ecf8e7b5ef2f816efbe44816503f9f91a116abbaebe54a58fc
-
SSDEEP
6144:8kTl1LmPVU0JC2YWSywYPduYi8kvF0/ZzKOtf7kxs4uq5JOuRavIp/rIUbVn8oi:8W167CW/dABNQ8fs5q7nR0IpTBb+oi
Malware Config
Signatures
Files
-
23393da095873755deffde7275dbd33f61b66e7e79af2ff8ee3352454c70b5d1.rar
-
Payment relief form.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ