Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Payment Advice.exe
Resource
win10v2004-20220812-en
General
-
Target
1.rar
-
Size
559KB
-
MD5
2cb715b9b892381acffd5d719df36d43
-
SHA1
ef177e4f1bed02c49e4954fe852a7180f426de49
-
SHA256
1ef3ec0d890f1e30b3a19ea2f1265ad82d096db18b67226dd78f6a7e98d0cbd4
-
SHA512
4a0e6c55c9468039748b0ca54bad7274d2e11f3a25b7b9f2b1bb1eee6732ab866780651910b666b6e4919b31f563d9338a8772e520ecc097b26cc1a7823f829f
-
SSDEEP
12288:e+tpwUNjZiMjMq+/B6wnfAFZeCAcUFEiU3gK5DSCsHmsBzPn39PbW3i2h:Zt2y1A7CFZeCAtU3gK0CMmsBDNPbW3Dh
Malware Config
Signatures
Files
-
1.rar.zip
-
Payment Advice.img.iso
-
Payment Advice.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ