Static task
static1
Behavioral task
behavioral1
Sample
EFT_Deposit_9857849statement.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
EFT_Deposit_9857849statement.exe
Resource
win10v2004-20230220-en
General
-
Target
7772b16b-9153-4223-5e54-08db20bfb838.gz
-
Size
426KB
-
MD5
98ec9c6850ed40d0ce5370543b1feb47
-
SHA1
a5a82fee7d2af30a71674555217a29291042fd87
-
SHA256
f56b889f385debad51fc759b85b8633f8c1008472ccbb208c91d80d338af0b20
-
SHA512
5847a071dc5453949cc8e70c07e9694b0c409182e73c19cdabc622345a300c900835ab5a320c17dd1f3fd272534bf4287cf9ec0d7142f1aec355b250ca4da145
-
SSDEEP
12288:lsZWpkxJILS9LzyHf3mM4TgMPSKnLdyayRg:lSIk2Sd+vt4XRLdyay+
Malware Config
Signatures
Files
-
7772b16b-9153-4223-5e54-08db20bfb838.gz.gz
-
sample.eml
-
EFT_Deposit_9857849statement.img.iso
-
EFT_Deposit_9857849statement.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
email-html-2.txt
-
email-plain-1.txt