Static task
static1
Behavioral task
behavioral1
Sample
Payment_advice.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Payment_advice.exe
Resource
win10v2004-20230220-en
General
-
Target
d2de86ff29f5c397a6c754257f724964.bin
-
Size
693KB
-
MD5
51f25eef714abe7f1f2796ed7ba02d38
-
SHA1
2587748a5b28433a3885e1f8f13219306e64a3ed
-
SHA256
fcef9f5063c0c4389f6e226c752429d10a53e6ba627c187713694dbbc8acfe6d
-
SHA512
bff624ed112fa8d2cbf443969e92714911ba61465d3a0c20e95780792ba7ea5fea4d7148832556118cb60d008cf96f0fde9f23c8fe6a1c31f0af09bc9adbe3ca
-
SSDEEP
12288:Rkh2Q9nYs8xGc76HOTm54jgBdNG26hZ3CA6YMJvELhyvopH8GdIHZg9lSya:RksQ+ac7Fm5UgB6rlz6hvEsmAalSya
Malware Config
Signatures
Files
-
d2de86ff29f5c397a6c754257f724964.bin.zip
Password: infected
-
be2b86b115eba1fdf59395604ff7fa7ec3582abb7f150fdde661d3f3feae2c82.rar.rar
Password: infected
-
Payment_advice.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ