Static task
static1
Behavioral task
behavioral1
Sample
order confirmation payment copy.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
order confirmation payment copy.exe
Resource
win10v2004-en-20220112
General
-
Target
order confirmation payment copy.exe
-
Size
29KB
-
MD5
52b704a5b91990616f13578732a79b97
-
SHA1
fd6c83a29b70dbe8fa9dbc5971ec03f403c5061e
-
SHA256
678f04893ab76acac51db1dbfc38aa7b5bc442055e00d6f4dbc209e8d065b086
-
SHA512
416fc722b9d7d327479666bbec60fe72117cdcf7eae58265004de483641c363601b6267a4c2367256d37a2498fd44ebe6ba675c642846a378b880cbd244c0056
-
SSDEEP
768:cAZtb5Knps4nMWp/jI4XuMI/86nOa6TP4:LTb5ysL6o186OaC4
Malware Config
Signatures
Files
-
order confirmation payment copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ