Static task
static1
Behavioral task
behavioral1
Sample
Payment.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Payment.exe
Resource
win10v2004-20220812-en
General
-
Target
Payment.exe
-
Size
947KB
-
MD5
7084794e65207923c736c1e55e87abb8
-
SHA1
cd657ba0e8442abe779fc7db5a63d502b6ef162e
-
SHA256
34b91aa79335759905f9405680460480b9d3a759c32e972192c0e6c41f3d7c36
-
SHA512
b03c499251d5739b1a5d05aea6e59a55432cbbd10034180814d1756d649f94aaead241e0dd91edd456a595108e5fb002ef3ccdd3eeabd5d16ec1e53256af8025
-
SSDEEP
12288:UaXrxR6wz8NxSN2iNXHoHymQSi9rMebjjnk5X:dXrzB1ZH2yRrjjn
Malware Config
Signatures
Files
-
Payment.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 782KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ