Static task
static1
Behavioral task
behavioral1
Sample
verified payment.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
verified payment.exe
Resource
win10v2004-20220414-en
General
-
Target
5d813767b6866940a44739d59a658f3dfcc9c316078af93567cf7ef5b85e0b3c
-
Size
424KB
-
MD5
705b8483fd603fed14cf09def577afe9
-
SHA1
f8ab3dd9f8daf90653b1616f093b1275e3616872
-
SHA256
5d813767b6866940a44739d59a658f3dfcc9c316078af93567cf7ef5b85e0b3c
-
SHA512
0c6c806a02eb1a58fc686619d18e3d781f96d815f06bfbfaab3f6bafdb5b04b211edd5261659ad261a1123a253e52b30059dc6660ae805426787790a87944ad9
-
SSDEEP
12288:2m/ruuY16IfdklPFhSkFBw8h9zWp+iGfp9Hdq2:e0I+lP6kF+8zLp99h
Malware Config
Signatures
Files
-
5d813767b6866940a44739d59a658f3dfcc9c316078af93567cf7ef5b85e0b3c.zip
-
verified payment.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 506KB - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ