Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT_COPY_PDF.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PAYMENT_COPY_PDF.exe
Resource
win10v2004-20220812-en
General
-
Target
PAYMENT_COPY_PDF.exe
-
Size
73KB
-
MD5
8d9c396e32632cfd8a54502b8641e4c2
-
SHA1
d19dbb8f0daaae9d817db34d37a692599d413e0e
-
SHA256
720fe1ea0ca41002b6fddc3d114e4a49f2107cd98c2de780fdf02d548c043f7c
-
SHA512
f3a13b9fe65a1aec6927c523f7e7909456aa70b84ec21beb4e89f3626c888dab60e976b925334135feae116e68616f37b68f8f187007efe3c004b270bce38b75
-
SSDEEP
1536:u1EswBBTZspN9/ERy9ynPgiaDx8FOqu+ZIJNa5dGKU9K90oajG2WbT37qWBzUI:Cehd9
Malware Config
Signatures
Files
-
PAYMENT_COPY_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ