Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PAYMENT.exe
Resource
win10v2004-20220812-en
General
-
Target
PAYMENT.iso
-
Size
716KB
-
MD5
d27a11601f3cd49f83b7d0006123cc7d
-
SHA1
84d061fc48602a3c37a49e2f51cc1b3961b84bf4
-
SHA256
daf48553831b2ed5a75ee468396b47a9ed9af0cc349a50ea459757f6a4289265
-
SHA512
5168113887911316fcb63e93ef58496889c8b28e323800c304956775f17b50e73c75e7b151ed9fd8b6922ea144d8aab0d6fc3286d706fdd0b4c5f31c6f19ec40
-
SSDEEP
12288:EFAgHtDg5xE11aTkruL7WD0bJoDgmodUwZgT/OT1YvPIcvPXWaA5ORk/NhqNRa9:Y4FnLGMbSLOTSPI8PXOERk2i
Malware Config
Signatures
Files
-
PAYMENT.iso.iso
-
PAYMENT.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 649KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ