Static task
static1
Behavioral task
behavioral1
Sample
PMT-09_Different_GSTIN.exe
Resource
win10v2004-20230621-en
General
-
Target
XDR_ResponseApp_CollectFile_RM-20230630-00001_a49530a0-6d56-47fd-9ecf-c59568369870_20230630T072643Z.7z
-
Size
15KB
-
MD5
3b21da671f893a545066f98a3b7c10e3
-
SHA1
c7d123ad98efe600b2d98f65bd771beb4053f64b
-
SHA256
f2345000dd0fe1d78593787ac05ddd12cc10534185f7ba7365a566e87cd08494
-
SHA512
d3e282d3b4fa1fee0ef8cfc1d4bab0ae90f7a18c3d64282a46d0467963c7966074e6e2a3b5b2cf30b33ec48b2e469aa76faa1f9200ffaa8f98e2d9705c82710e
-
SSDEEP
384:SzWt0GL4J8vcSsoGXNuHVEViGo8lw7xvvoWvJvmPLSq0:QWorVuHmiYlSvoWvJuDS5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PMT-09_Different_GSTIN.exe
Files
-
XDR_ResponseApp_CollectFile_RM-20230630-00001_a49530a0-6d56-47fd-9ecf-c59568369870_20230630T072643Z.7z.zip
Password: jabn52z5
-
PMT-09_Different_GSTIN.exe.exe windows x86
Password: jabn52z5
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ