Static task
static1
Behavioral task
behavioral1
Sample
Payments.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Payments.exe
Resource
win10v2004-20220901-en
General
-
Target
Payments (1).img
-
Size
60KB
-
MD5
a4ab5b0f8fbe95819411f88f88d9558b
-
SHA1
d567e46a2a6c7e2e7cf89dcb527f692d54584e9f
-
SHA256
411585ad5ba167aa503664789dc1fac21824e3b4cd3ab08489433e1453be4b11
-
SHA512
3dafac01fd3b606ab52144106422c39297f42a4e128ce7785234093eb211e5274d1a0748665caa324d08812f2c9462b6de56ed68fa42e84504d8d4f051b7e5cd
-
SSDEEP
96:5DP/4QDGrqNdHcao3xZU0MvT8qGtL83WNtW1jYcFoNVcz1W4oKYMsLYUa:VNDP7Hcao3xJ8ch88stYcFmVc03KY
Malware Config
Signatures
Files
-
Payments (1).img.iso
-
Payments.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ