Static task
static1
Behavioral task
behavioral1
Sample
Re RETURN PAYMENT TT.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Re RETURN PAYMENT TT.exe
Resource
win10v2004-20230220-en
General
-
Target
Re RETURN PAYMENT TT.exe
-
Size
1.1MB
-
MD5
97cbe7032ce890f9479b934f4a0271cf
-
SHA1
597b2cc0af549c2d503d0b0ae38b6a1bf42bd381
-
SHA256
00807698487a4db02d91416e1b1b1d4232893eaa8a9053a64f4edcc0f3ed9948
-
SHA512
329b5588de3aa7a38c832b4f511a3d3080fd48b10cc1b2e897eec856f77a392d002d58f9c75d20a145df9e9f851082150b08410372348e704e98373a843f930c
-
SSDEEP
12288:23n5uw8wo1Ujoj0xkIg5LGInWMZLQw8I6zB4Xt1EnvC:Muw8wo1UjojygaeWKLQw8IN91Y
Malware Config
Signatures
Files
-
Re RETURN PAYMENT TT.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ