Static task
static1
Behavioral task
behavioral1
Sample
$103,430.00.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
$103,430.00.exe
Resource
win10v2004-20230221-en
General
-
Target
$153,430.00.pdf.rar
-
Size
573KB
-
MD5
b42acd737f2fe83aec219674bb477ee4
-
SHA1
3749c22f16f10153b28a26b483edda02d556f822
-
SHA256
5b2855e86139777288b69b8ffebdf685d42884f78e7984b978ac4c7dd3006fbd
-
SHA512
8b8177e05106a96362b5c4b6fe4e7ebd322dabeee44cf947267dd3b6af1e20c72afcfc54cb31c33a2e7ce91f6ca498a58cc633d99fcb36842685b020619218b7
-
SSDEEP
12288:DnvGB/LyBvx/3jgKmMNmvQ/O1m4moyR/elLoP/VLPB:Dve/+Bvx/3jgZMyfc5outLPB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/$103,430.00.exe
Files
-
$153,430.00.pdf.rar.rar
-
$103,430.00.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ