Static task
static1
Behavioral task
behavioral1
Sample
RPDQOPKDGSA_PAYMENT_INVOICE.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
RPDQOPKDGSA_PAYMENT_INVOICE.exe
Resource
win10v2004-20220414-en
General
-
Target
RPDQOPKDGSA_PAYMENT_INVOICE.exe
-
Size
299.0MB
-
MD5
e19f652edb3ad5c5d322a9458f0bd57b
-
SHA1
3c21da297f2119d4312c5401981dc31fcbb4bf81
-
SHA256
30200a7b327e28ce7e846002f0cb8e63716fac612a8bf3c78d2abe568d9de9d9
-
SHA512
e82fc0d590c3017e478e0eb3c34a8c9af231dd8ddbb8d224b2445d1365e3743476bbaac4877ef0cef6484ad4310518a85d09a16ecc7e5483342fbddc0a5c05b8
-
SSDEEP
49152:voFzOuGo6ggS5CAe5AK7UzKsiO4HF0Zjt2:cBgAcou
Malware Config
Signatures
Files
-
RPDQOPKDGSA_PAYMENT_INVOICE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ