Static task
static1
Behavioral task
behavioral1
Sample
RETURN PAYMENT TT.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RETURN PAYMENT TT.exe
Resource
win10v2004-20230221-en
General
-
Target
RETURN PAYMENT TT.zip
-
Size
781KB
-
MD5
12de054fed2ba2364f6a49c51bf93564
-
SHA1
2c54743b5192c3de55c3f11b32d162c5be5cacb4
-
SHA256
f3ec12f063aeb7110052c07b3ab30b67428eaddb26648911a2b4074d42348d8b
-
SHA512
4c0bdc7cf32e0cd9854d577b0d64cb744bb3c5f760a1b8dcaf6d6f0e2a74c442f29376fd9fa6b42340d5a341afb2971ea79e0be86c7095fb4220822f21a46d71
-
SSDEEP
12288:/OHmVQhnYorr/T2vbI3dzIkZVjM7QLnDo06IfLiLSX5lZxk1+N:GGmrmkVHVj6unLHJ5lZm+N
Malware Config
Signatures
Files
-
RETURN PAYMENT TT.zip.zip
-
RETURN PAYMENT TT.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 959KB - Virtual size: 958KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ