Static task
static1
Behavioral task
behavioral1
Sample
JUNE PAYMENT BANK COPY.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
JUNE PAYMENT BANK COPY.exe
Resource
win10v2004-20230621-en
General
-
Target
JUNE PAYMENT BANK COPY.exe
-
Size
983KB
-
MD5
c41b26964e1e267ae4f3eb2f2296f673
-
SHA1
b62a870f45277cb32a4cfaa7c08ce32b4b341806
-
SHA256
449885db82a87d3151e04067039b2d07d8a844e0670842a2f739d493ebe6d1b1
-
SHA512
8de295d4bddb96edc7f0e4bcdd6ec11cf306afefb2f841b2d3c20e32fa836b0a7a417573a153aa2009ec4ee4fd68980f8bb537794bc5bb3de480369641b71bc5
-
SSDEEP
12288:48oSl/ksMPzI/Z8NeMvnWGWPHE+Ucl7nGBMpl+CPfCSuwNiVLZjMP7:48L4LI/aeMvnWHPk07GBMTTNNcZYP7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JUNE PAYMENT BANK COPY.exe
Files
-
JUNE PAYMENT BANK COPY.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 947KB - Virtual size: 947KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ