Static task
static1
Behavioral task
behavioral1
Sample
Advanced Payment Copy.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Advanced Payment Copy.exe
Resource
win10v2004-20230220-en
General
-
Target
Advanced Payment Copy.exe
-
Size
283KB
-
MD5
09409a080e319319e27445d6ae979715
-
SHA1
c4d53e4f165e9341b5562594abd995d808c90bfb
-
SHA256
a7496f64d8f6fedf5d7684e9b073afc39f7f0254ca3a35de6383445a9235329e
-
SHA512
3a044a2a6dad21e8342c51fa82ea96022a748e142af034d9d73f59eaa47d5e0e986aa0db3369ae8cf4a22e517a4df849680baa68862b907b8c3ea108835cc5ec
-
SSDEEP
6144:WuI5B5zVJAiZneXOuGpM1O27hDT9dCgebj/:WuI5B5zVJAiZneXOuvVfG
Malware Config
Signatures
Files
-
Advanced Payment Copy.exe.exe windows x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ