Static task
static1
Behavioral task
behavioral1
Sample
fund transfer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fund transfer.exe
Resource
win10v2004-20230220-en
General
-
Target
fund transfer.zip
-
Size
529KB
-
MD5
6eceb7417321e5af21e101b4c3c6fce4
-
SHA1
72df66effeb82f190ffd3fc08f17a9dea9e9699f
-
SHA256
283bae702fe2d684e28a4847cf259e3aa2d2d52e37774239d8a980033c6da5c9
-
SHA512
dcc88e9d2d96e538f5697cdefec3ad389aa2a9256542d0efd3538cb9cca04f6d996d42bbdcfa90074bd81737be0c0c5821d4d043f8e416d6f4c37ce8c94a4f7f
-
SSDEEP
12288:qCL/T8SjsvpHfO666L3qX+DfNI5xrUG6UgZMBckueQ:pvLsvlm0zN+gZMSDb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fund transfer.exe
Files
-
fund transfer.zip.zip
-
fund transfer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ