Static task
static1
Behavioral task
behavioral1
Sample
rdBcCI1XLaU8n5j.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rdBcCI1XLaU8n5j.exe
Resource
win10v2004-20230220-en
General
-
Target
PAYMENT SLIP.rar
-
Size
541KB
-
MD5
4cc6fd0f2922b0fb0985a7c6c00bf737
-
SHA1
6b086005c0ff80dd7bebad356fbc181eb38a59af
-
SHA256
9decaa1595eb5e88ef2f20f3829c4c23ecaef7fcc2d5a56591ac430178c38595
-
SHA512
7f4dfdebeb1d52ba96d8a27e970c0931ed441a64fa0c386a539299e2a0a0ff80f6a6bd2c6839b70b80b618f5e03b184e6c29cd830151a265fa3e47b693b5791d
-
SSDEEP
12288:reTeIToVODx/xVjn+jsZysmOU1/IVrMN0b7EMcLjqD8kFW7e0oVAhZWz:yePqxHj4ds1I0cBxxC0oVm8z
Malware Config
Signatures
Files
-
PAYMENT SLIP.rar.rar
-
rdBcCI1XLaU8n5j.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 663KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ