Static task
static1
Behavioral task
behavioral1
Sample
Payment Slip·XLS.scr.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Payment Slip·XLS.scr.exe
Resource
win10v2004-20230703-en
General
-
Target
Payment Slip·XLS.scr.exe
-
Size
37KB
-
MD5
e464158d808ec8d16a3dcaf83e56676d
-
SHA1
2504d48d5ceb1e220379e8cc4813add7f0ee3a93
-
SHA256
5340c12deafd1e47beff8ea66df02a83b56a4259c1830c7fa02123bcbe9a1992
-
SHA512
7e9e65654855b0b15048271ff83722a9522e9902812d874779369740d4b364a70fe9c11e5b7fb35ffb7d08ea30e96f7d2dc551895c07df8c91951be8f19cb5ed
-
SSDEEP
768:mlnUOA5W+73M2F7Tllmu24Ra2DovIieNhIPVQPaoaA:o+g2JTll92m7ov0oWDaA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Payment Slip·XLS.scr.exe
Files
-
Payment Slip·XLS.scr.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ