Static task
static1
Behavioral task
behavioral1
Sample
Payment Slip.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Payment Slip.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Payment Slip.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Payment Slip.exe
Resource
win10v2004-20230220-en
General
-
Target
7d32b7ad4ecec265829f68309739ed8b.bin
-
Size
1004KB
-
MD5
2885aeaf79fe80526312d88cf86b6d2a
-
SHA1
d2710a64eeb67c49433aba03206e2bc0e27e5887
-
SHA256
51a8e737638222672f5bb005d8526ab36cacef6279740af4bcc1e23dcc37133e
-
SHA512
0999af0aa7b1114d53fb6d93f3529205b3cb4e34d0c41690f24e238ed0c210b4afa307a8e44df77768300cada83df114b1a3d85931236f2cb600b0ea01677d54
-
SSDEEP
24576:k7Svl5jJE06/NMp+2iGshZu0guQeCGMUu+2Qt4N+FKD0mx8wiH:k78l5VSFMWGs7u0guQeH2O4AUx8tH
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/Payment Slip.exe unpack001/Payment Slip.exe
Files
-
7d32b7ad4ecec265829f68309739ed8b.bin.zip
Password: infected
-
2f354140d72d961648ead51079c2a47646897346f62174d8bcb8fa1ad3a5637b.zip.zip
Password: infected
-
Payment Slip.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Payment Slip.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ