Static task
static1
Behavioral task
behavioral1
Sample
rMerchantReportBYDocDT.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rMerchantReportBYDocDT.exe
Resource
win10v2004-20230220-en
General
-
Target
rMerchantReportBYDocDT.exe
-
Size
14KB
-
MD5
0a22508076245ec37ed004cc2f8b5a1c
-
SHA1
4dc54c3747b07617c3f1a0a8c2b92d7cf294c5bf
-
SHA256
de03a71ad70b23148585202db3c6e9eec52bac125c4227062f54e4a53417f1da
-
SHA512
13eb2102d0fdabca61e9b8f64f8b9cd6114a72001c15e759a708997035e083957163dc8c03096214deb4e60b276ceefea0aa744091da6fc05c87c044a6be7b4d
-
SSDEEP
192:M3GTGfkAwB/8O9YZkCB+5nnBVccsa2pC/rkQJqao+LXD8dkwTcE/ItWzSXgcCpBY:gfkvFk8nBVnsa2pCbFAklNUzm4Lxm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rMerchantReportBYDocDT.exe
Files
-
rMerchantReportBYDocDT.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ