Static task
static1
Behavioral task
behavioral1
Sample
e payment receipt.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e payment receipt.exe
Resource
win10v2004-20220812-en
General
-
Target
e payment receipt.exe
-
Size
730KB
-
MD5
c302cf4c5658fcd484c425042de6a86c
-
SHA1
7b6c123096a17cc966223fd37dbcfb31991ef8ec
-
SHA256
6a60f443e88c8eb41c1953fac2137b036daa7d6f5f5e250a4dc4489e1e3d3921
-
SHA512
6e6c85b43fe4bbef9bbdde84770311514e44b5b73f2c6f42e226cc0c89594419680f8f5595e4360a8e3e34e448ceced2ac9b97702f31c3a5242308c3c5fb5cc8
-
SSDEEP
12288:yHvR91eS42DX8v1lAMqLUUHvFzOzv12zh8hN20hb4zx5XkO7TvsczNGiZq1BNvSY:yHvR91eS42DX8v1lAMqLUUHvFzOzv12H
Malware Config
Signatures
Files
-
e payment receipt.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 661KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ