Static task
static1
Behavioral task
behavioral1
Sample
BANK FUNDED SLIP COPY.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BANK FUNDED SLIP COPY.exe
Resource
win10v2004-20230220-en
General
-
Target
BANK FUNDED SLIP COPY.exe
-
Size
852KB
-
MD5
625b0222413f234ef2dc85f735c74782
-
SHA1
8503534bb692b7f03beac0da33e7bbd7599aa1e6
-
SHA256
393d94791809b4059141bd1d6de789b431a71eb544bc7f7b0d7a1700c042ece5
-
SHA512
4a90e1b77491a53f035f9820fa069e9c96107ad5dc40e30eafb8e6817f6dd3282ac874c7ceca5ca9f35be4f6ca31b98c4c72e7a2508d091382d9ccec0cee1817
-
SSDEEP
12288:ZlKnuvEXqXdVjmZdDcghPsNF1bFu4yjyLrb/npXZdFpQF7T+:+24qXdVKdDlhP2lfvDnNQ/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BANK FUNDED SLIP COPY.exe
Files
-
BANK FUNDED SLIP COPY.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 808KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ