Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT SLIP.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PAYMENT SLIP.exe
Resource
win10v2004-20230220-en
General
-
Target
9f82c1885282264acacff8844494c930.bin
-
Size
489KB
-
MD5
be6324edf757a89ab5fd6842deb1bc63
-
SHA1
eaaac44ba0b671e9ce913abce77b7369b159ac17
-
SHA256
a23225558561c5b5bc264b3f9057205cf78fda631bb896753fa919d98d4ae440
-
SHA512
f057a30269d0e3d8a7838680c47b8a3298719cb6368a8d37d53904be09df7a0181f0ede61a5ac3aa0fdf6a22a9498ea6050dd6319753695d09378f9084f7d513
-
SSDEEP
12288:ctTLnlcfyilf5+gB2lwZPyhM+mQh6si/NNGis6BiLUwqUCgc3WD:0TLmf7qY+mZsi/AmwURgc3G
Malware Config
Signatures
Files
-
9f82c1885282264acacff8844494c930.bin.zip
Password: infected
-
3fdc18fb3e0fc005fc2dd74e912389748d805653cb8a0d978779390e75ca4a02.zip.zip
Password: infected
-
PAYMENT SLIP.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ