CAMSCANNER PAYMENT DETAILS[.]exe

General

Target
CAMSCANNER PAYMENT DETAILS.exe
Size 320KB
Sample230522-redlyagh63
SHA256 688ba75525fea2de02b06a99c4698724cb865d8e0f195d1b7b436aba7d942541
MD5 df8b6cc1f871db34157a3d23f85450cd
SHA1 d9c03b376704e43ac5ce983a15b81a5010129aba
SHA512 ae7ae9af87cc80d68c999e0f71c3a6b1c1ddcb63ccb41e322f5abd0307e39f99c67e0e09b48f68d17abf838a041bc0a7d8d7a78ddea9c3f68ad1ee7a3a165d7a
SSDEEP 3072:NuuVQvdgLdXX4TZtFxV6qLaKrxV+SjCPGCl4tk3xMIlx29vSRqGPalkzWcB1fqfF:x+m4rFZCSL44tk3Wy2o1ylWhfCOCDJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CAMSCANNER PAYMENT DETAILS.exe

File Explorer

CAMSCANNER PAYMENT DETAILS.exe

.exe 320KB

CAMSCANNER PAYMENT DETAILS.exe

IMPHASH 91e52b5b5b8df9c17be98b9e4559a03d
SHA256 688ba75525fea2de02b06a99c4698724cb865d8e0f195d1b7b436aba7d942541
MD5 df8b6cc1f871db34157a3d23f85450cd
SHA1 d9c03b376704e43ac5ce983a15b81a5010129aba
SHA512 ae7ae9af87cc80d68c999e0f71c3a6b1c1ddcb63ccb41e322f5abd0307e39f99c67e0e09b48f68d17abf838a041bc0a7d8d7a78ddea9c3f68ad1ee7a3a165d7a
SSDEEP 3072:NuuVQvdgLdXX4TZtFxV6qLaKrxV+SjCPGCl4tk3xMIlx29vSRqGPalkzWcB1fqfF:x+m4rFZCSL44tk3Wy2o1ylWhfCOCDJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30098

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetDriveTypeW GlobalCompact InterlockedIncrement InterlockedDecrement HeapFree InterlockedCompareExchange OpenSemaphoreA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetSystemTimeAsFileTime EnumTimeFormatsA GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleAliasExesLengthW InitAtomTable GetModuleFileNameW lstrcatA MultiByteToWideChar GetStringTypeExA GetProfileIntA DeleteFiber SearchPathW GetCurrentDirectoryW GetProcAddress CreateJobSet RemoveDirectoryA SetComputerNameA GetLocalTime WriteConsoleA InterlockedExchangeAdd SetCalendarInfoW FindFirstVolumeMountPointW SetFileApisToANSI AddAtomA CreateIoCompletionPort GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect CompareStringA FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW DeleteFileW MoveFileWithProgressW GetFileInformationByHandle EnumSystemLocalesW GetLastError GetVolumeNameForVolumeMountPointA CreateFileW SetStdHandle EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW GetCPInfo HeapCreate UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetLocaleInfoW IsProcessorFeaturePresent HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleW DeleteFileA

gdi32

GetCharABCWidthsA

winhttp

WinHttpGetProxyForUrl

Sharing