Static task
static1
Behavioral task
behavioral1
Sample
Zahlungsbeleg.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Zahlungsbeleg.exe
Resource
win10v2004-20230220-en
General
-
Target
Zahlungsbeleg.exe
-
Size
456KB
-
MD5
1149b9cfcad53c0b7e2a5deaede4e4b3
-
SHA1
63426f5bf17e07a427db237887eb8d2b142b719a
-
SHA256
4f08c845863422fecc2d4278e65c6db34b7a320657d0f8ece52c429bb604419b
-
SHA512
6880e10d9a7810e1f833c986911c1e8f72c78ef3dad0595323c5cd4a5dccd56310adf1bc4cf798420ea9f77700315444de240237bd58818681f3b85bd8aa35a2
-
SSDEEP
12288:cpHbeJSVOYpeBqls6gJc+Ehp6woJhaLCc+X18l6MJ9i0KACdbs:oHSUV74B2OCiwoJoLCDX11MJ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Zahlungsbeleg.exe
Files
-
Zahlungsbeleg.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 455KB - Virtual size: 454KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ