Static task
static1
Behavioral task
behavioral1
Sample
REInvoice-[PAID]09302022bankslip.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
REInvoice-[PAID]09302022bankslip.exe
Resource
win10v2004-20220812-en
General
-
Target
6dba1dc5ab15be84d78103915beee0bb
-
Size
616KB
-
MD5
6dba1dc5ab15be84d78103915beee0bb
-
SHA1
f8a287bfbddab969a2ef094634ed10d06cd35d22
-
SHA256
e21e5009ba0b98d147dd15b548f1bdf8e3e59083f8f8663b10ade79aeaa602bc
-
SHA512
d137cb1c9c973aafa7ba36edc251b502e505b435cdfc9af0fac6c773cc0566d735eebd9b7548a811230d1690316c72f2463db9bf4e03b29471f9219338829501
-
SSDEEP
12288:qdti0Qcj6q4sdHS1eEOhBpGydd4ZUhlpbPhseOpQg4f1Torm+dqB7RRk/:qqzqzdp/hBpGydjp2eOpl4fZR3DRk/
Malware Config
Signatures
-
resource yara_rule sample dropper_html
Files
-
6dba1dc5ab15be84d78103915beee0bb.eml
-
http://www.transcarsolutions.com/
-
http://www.transcarsolutions.com
-
-
RE?Invoice-?[PAID]?09302022?bank?slip.zip.zip
-
REInvoice-[PAID]09302022bankslip.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-1.txt.html