Static task
static1
Behavioral task
behavioral1
Sample
Ralson payment slip.pdf.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Ralson payment slip.pdf.exe
Resource
win10v2004-20220414-en
General
-
Target
9888c457740377c7aaa34b743985c151226fab832c3dabddf9a5c43352eff34c
-
Size
508KB
-
MD5
b121e6108cfe6c1edf9eea84fde21566
-
SHA1
656ea4c6fa0ea4b8317174a638b5361967eeeca9
-
SHA256
9888c457740377c7aaa34b743985c151226fab832c3dabddf9a5c43352eff34c
-
SHA512
1e8445996c5a7ca93112ef51721f3ed9d9a7df6363f4f10c4bcf5b222948d0f91f34e8d4b77d3369699e4322f60b941961943da16312ac1ca509a9b012c813ad
-
SSDEEP
12288:FbZYcJVUs3PL4jzOddv6VJ0yZPJMjET4np1jS6Zm:FbZYcTzPL4ov644Mj84phS6g
Malware Config
Signatures
Files
-
9888c457740377c7aaa34b743985c151226fab832c3dabddf9a5c43352eff34c.rar
-
Ralson payment slip.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
O_TOM Size: 481KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ