Static task
static1
Behavioral task
behavioral1
Sample
payment_advice.exe
Resource
win7-20220901-en
General
-
Target
payment_advice.exe
-
Size
413KB
-
MD5
2bcb9d42f5610e52c26a5e9e52733ee0
-
SHA1
e7e9e7886d3788112161717f8e6e2cc763a18bc7
-
SHA256
b13bc9c14764fa971ad6e5f0d4583ed0a25b4ffd7a426a2b7e28567f78c4d165
-
SHA512
9097a3138d1d7a54e65739b7c24f17bbe39df462a972e5148662fff8f7236bc3fb6c7e787ca1ed4e4b4ee0a50ee67c94f1aceadf8ebf30651662dc99dc7615da
-
SSDEEP
6144:iH57NomDEarimGe7DwTAKTc3yvX9ddr6f6I3GF/iBCoYmLykkz88m0C9tyu:M5T1rimBvPy/9XrUB9ukm8Na
Malware Config
Signatures
Files
-
payment_advice.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ