Static task
static1
Behavioral task
behavioral1
Sample
Zahlungsbeleg.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Zahlungsbeleg.exe
Resource
win10v2004-20230220-en
General
-
Target
Zahlungsbeleg.7z
-
Size
6KB
-
MD5
cbee22239b4fa81655e2e618cd12db0e
-
SHA1
ade822ce014d2f4ad376a2dd90d404fa4d09aa2a
-
SHA256
45406e0c2255b0abf8123de1c01a424b23fe708e82e8e520558226015372c093
-
SHA512
bc4ebf49345616f12cb52dbd862f519a3cd10504c0e8088829cf405e148d2e766031e4b8343420deeb3a9aa044248c9314ea08b5b245520765ab258e6d053169
-
SSDEEP
192:UyW8d46Ybx2HU6mfEBW1yPtpCmdjVxSEXRMkl:XW862HUffEBWg1p3dZ0All
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Zahlungsbeleg.exe
Files
-
Zahlungsbeleg.7z.7z
-
Zahlungsbeleg.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ