Static task
static1
Behavioral task
behavioral1
Sample
Bank slip.exe
Resource
win7-20220812-en
General
-
Target
087d8c3b3845bd7193b6e16470707f12
-
Size
917KB
-
MD5
087d8c3b3845bd7193b6e16470707f12
-
SHA1
917f438e4548e6c7c30bdfbbf680c843ed29bb3f
-
SHA256
c78f2aeef5397cbe8174474405d9d880977567cd4eeb944f3170790a7e0850bf
-
SHA512
6106b550b5c27bfb5f37be76a243e07435d41dcd694939001f9b9d79e6707244545ee948475cf03a15cbd02af37022c2fb56087d7e3889577ac28ed72960e9da
-
SSDEEP
24576:7GwpUVeemx3JQJ0Nsd8JZAQL4P6wfg3fPHx:7bpUVV43JQJ0qC7wg3x
Malware Config
Signatures
Files
-
087d8c3b3845bd7193b6e16470707f12.eml
-
http://www.taihuaship.net/
-
-
Bank slip.zip.zip
-
Bank slip.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-1.txt.html