Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice.scr
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Payment Advice.scr
Resource
win10v2004-20220812-en
General
-
Target
96fcf594f5dd5c6283685fc87a6a3bf08bfe3d8f632d8ab996d6d57188f43aa5
-
Size
283KB
-
MD5
5fb94631b3086d13f8ba5dfde6f86c20
-
SHA1
5810ae378935a1ffc9c28df27e329290839a8f1c
-
SHA256
96fcf594f5dd5c6283685fc87a6a3bf08bfe3d8f632d8ab996d6d57188f43aa5
-
SHA512
5c8195e87a0e36ff0634c4de680d2b8267c261e9d75571054196f687f2e10feeee6bd867f5ac75e53e6de152144021a5d6e3b120ba31f283605b3cf709f66d53
-
SSDEEP
6144:d/BxTCV8saSyu3fYISQN5zYUubtUFRWc3ewb7hRj2WfF+LHDWhiJ/191:/V1saSyxqubt0rewvf2WN+b6hi/p
Malware Config
Signatures
Files
-
96fcf594f5dd5c6283685fc87a6a3bf08bfe3d8f632d8ab996d6d57188f43aa5.msg
-
http://www.deutsche-bank.de
-
-
Payment Advice.zip.zip
-
Payment Advice.scr.exe windows x86
2a08b6b050d6a04eae75ee2a9becd240
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
DefWindowProcA
InvalidateRect
BeginPaint
EndPaint
MessageBoxA
DestroyWindow
gdi32
SelectObject
Ellipse
CreateSolidBrush
kernel32
SetStdHandle
ReadFile
LoadLibraryA
GetOEMCP
GetACP
IsBadCodePtr
GetStringTypeW
GetStringTypeA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoW
IsBadReadPtr
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ