Static task
static1
Behavioral task
behavioral1
Sample
Payment Slip.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Payment Slip.exe
Resource
win10v2004-20220414-en
General
-
Target
ec6a3f5f18f8043573bb5f88f3c6409755c03ed9cff4605b27adf8143c92dd76
-
Size
455KB
-
MD5
1117428353370a26069953f0cfe912d3
-
SHA1
8f384df90738712d66a20033ff4b4a8baf609d09
-
SHA256
ec6a3f5f18f8043573bb5f88f3c6409755c03ed9cff4605b27adf8143c92dd76
-
SHA512
b5328101f186aeafc120b368ec26dea4bf90d08308284f25b9d57714c6cfe6a31f99487f6f2132a040565dcef4db0959499718f0fdbe1737d9688084eb250b71
-
SSDEEP
12288:HDPq8upNLR6nkMQGiQYHRtIWqkA5dgoIpj7lAErnvTvt6vnD:HDCxQnriEWqPjIpj7lAaDt6vnD
Malware Config
Signatures
Files
-
ec6a3f5f18f8043573bb5f88f3c6409755c03ed9cff4605b27adf8143c92dd76.zip
-
Payment Slip.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 557KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ