Static task
static1
Behavioral task
behavioral1
Sample
Payment copy_00000988.PDF.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Payment copy_00000988.PDF.zip
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
Payment copy_00000988.PDF.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Payment copy_00000988.PDF.exe
Resource
win10v2004-20220812-en
General
-
Target
Payment copy_00000988.PDF.zip
-
Size
614KB
-
MD5
cdc1c2d61823f4b0f60ba213af125be1
-
SHA1
0df34f03d6eebc24e7f138ba4f541c80fe2e3934
-
SHA256
8f3295bfd93ef5affb09b0f2c5ccde4aa33b0c94c117cbfb4b09045fe6201d3e
-
SHA512
29e7b10b171d4c1ef0ba3850d9cc0be90b5b329e07dbd9a0a3ed8a2c715e3602cc83f41d730197f598ffd654c9b906378d0f488827f88b66294b5ada1d4a0435
-
SSDEEP
12288:u2i/SwBwo8FGiN3ZW5fA/Ku3NRJC3guGUw7ZI9UA7MHLoM:u1awBwo8oiW5fA/d3wguneI9/oHD
Malware Config
Signatures
Files
-
Payment copy_00000988.PDF.zip.zip
-
Payment copy_00000988.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 820KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ