Static task
static1
Behavioral task
behavioral1
Sample
Odenis Sureti _Pasha Bank _Pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Odenis Sureti _Pasha Bank _Pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
Odenis Sureti _Pasha Bank _Pdf.bat
-
Size
906KB
-
MD5
402cd563d2873bdb509978964027bea5
-
SHA1
63385ffba172ec7d75ddd36b0100af4e60fe889c
-
SHA256
8814a6ccad052c79bf05d20a1e6ac10c3e9650295c3e51ce69913285bf806550
-
SHA512
193e20079eae62b473c285ba224dee75f12712e25dfe8767076d88f61c196f8b45dc74713278d47f1afa58209db1bad694d0fe68d80691bd9a73c5ab5f90db92
-
SSDEEP
12288:FWVt00/e9Ckpd/upd/k2PKhk246c4MiDzfNJzL49gc+zGfTTUsuIj4T34tcB0hC4:FWT00G98PKWTiDL///zGH7EGc0Ws
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Odenis Sureti _Pasha Bank _Pdf.bat
Files
-
Odenis Sureti _Pasha Bank _Pdf.bat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 882KB - Virtual size: 882KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ