Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT SLIP.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PAYMENT SLIP.exe
Resource
win10v2004-20230220-en
General
-
Target
PAYMENT SLIP.exe
-
Size
518KB
-
MD5
5bdad991decf39d6212c22eb23e88208
-
SHA1
f440a2b3d6fc2e73edcb28f75e9ebb7d50104373
-
SHA256
4c20baaa49d158f53ab58c31f8d875fd4043b7d3eef9d4f18c986ec334002e9a
-
SHA512
c10820a82060b526bf77a6e6eea5f2dcb2d4b707777ce4f46a9d897f8e43d0e66e30c52fe4ab61ceb58ed9bf36a82d0cf3d8121bf020009b38fa30c7e14c44e2
-
SSDEEP
12288:MNd66m+LwfbaVYx9kyOkH5YWpX00XpYCluMAv3npMovInUg6dqrlb:CzLwzaqx7HYEhNhb
Malware Config
Signatures
Files
-
PAYMENT SLIP.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ