Static task
static1
Behavioral task
behavioral1
Sample
payment copy.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
payment copy.exe
Resource
win10v2004-20220901-en
General
-
Target
payment copy.rar
-
Size
648KB
-
MD5
f8a48db36fa447ca9726ebe6a0e24f9d
-
SHA1
4fa18d1e1356750cc01984c0426a4b96caf4c6d1
-
SHA256
24880d900aef85c6fdec23263a5318886318323631d9494794ec415f2367e6c2
-
SHA512
2df3e94634162c29706d4f79f8c6479575eea7f79cd28f205d7a8ff73aa656be2cf3d7443f2380d0e9b35c4d88ae810fe4cae897b6883e019bcdf92ffa32c839
-
SSDEEP
12288:Uv8kxarGyQmyl/jSHvLb27uIW7PdHgMYeXbon/ZVGTJbbtsn9YeCajR4zaQBUVoM:Q8NC1x/jSHzC7+HMeLovGTJbhyCI5b
Malware Config
Signatures
Files
-
payment copy.rar.rar
-
payment copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 788KB - Virtual size: 787KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ