Static task
static1
Behavioral task
behavioral1
Sample
Payment Remittance Advice 09132022.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Payment Remittance Advice 09132022.exe
Resource
win10v2004-20220812-en
General
-
Target
8230136339.zip
-
Size
402KB
-
MD5
296055ccf25541b42de72155874ef0f4
-
SHA1
ee091e32015d5b8c127f3aa719a9027b939d7402
-
SHA256
2487871a2c16ca93c59c644577097bed70e77a56b5bb77aa8e7aa832d25f3764
-
SHA512
53795c2510d0bbb84ed08f411969981f055717faf6b8b65b4a203edb0255b029282ef46c73627decd31070f2fbf4e944c18624c2931fb77635418c80612da867
-
SSDEEP
12288:ZBl1Xxuqp4Z78UzCJ1pL4MOnYCGifnYcab/tjmSx:70O458zPpkMCdfntabJmSx
Malware Config
Signatures
Files
-
8230136339.zip.zip
Password: infected
-
d2b7e08b736e954154479c6f41c1f4f48d3d5e2336866cf3b9145e5026c91d6f.zip
-
Payment Remittance Advice 09132022.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 549KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ