Static task
static1
Behavioral task
behavioral1
Sample
BANKSLIPpdfexe.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
BANKSLIPpdfexe.exe
Resource
win10v2004-20230703-en
General
-
Target
BANKSLIPpdfexe.exe
-
Size
1006KB
-
MD5
60f00b4f92ca591ab149aced07936328
-
SHA1
15b6dfe0dbc9f6afac8dcb629d8a4e692856186c
-
SHA256
bcf230d03813cc656b56bcb5331cd946cc976a25657b62ff89e3b97f9a7b089c
-
SHA512
224a133c2c2ad9f97512224b37a2cd5f8eba1d6deb559e04b2566ef8e9f03572fabcc2f9203f172749754f875aa5c1c26db9d71f03246a1f7af6303308b6787e
-
SSDEEP
12288:abWnA0T55GAbw/zdY6V0Jgj+tjWMi/Nn1Q7ZCgH+:a/trdY6nj+di9WgT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BANKSLIPpdfexe.exe
Files
-
BANKSLIPpdfexe.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 820KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ