Static task
static1
Behavioral task
behavioral1
Sample
Payment 20230504_1306030770.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Payment 20230504_1306030770.exe
Resource
win10v2004-20230220-en
General
-
Target
Payment 20230504_1306030770.exe
-
Size
21KB
-
MD5
16e04945d87b9c5b18af0e93bd8cc91b
-
SHA1
92a66b7ee8dd6fabd14e70de1da2c69c71873794
-
SHA256
0fe40012d9bc6466173c5860fea01e4b7f4390c4dcc2fb95aeaef466d32c8904
-
SHA512
8b938a41f1d932d606a0eb855e84c590b501ecbc9b418c8b7d292e5337a0c58c76705bf87ece121060b47caa2e6fb09db6763950399b97ee3749b25e4bb86bc3
-
SSDEEP
384:CmCJDitBjQsMtnw26iC8taveG9GgXNEH3D1pbABf2:CmC5hjCTvFGtHTDyf2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Payment 20230504_1306030770.exe
Files
-
Payment 20230504_1306030770.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ