Static task
static1
Behavioral task
behavioral1
Sample
Payment receipt MT103_tt 9630 copy.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Payment receipt MT103_tt 9630 copy.exe
Resource
win10v2004-20230703-en
General
-
Target
Payment receipt MT103_tt 9630 copy.rar
-
Size
637KB
-
MD5
d1ecfb3fe25bd624e78f8fca6fa33b8c
-
SHA1
cc6491da9957342cc73cc7f5c61f6a431586da42
-
SHA256
6e1ba899538ce5673e53f85507696dd08b2ce7f6977930003629b3fee05ba970
-
SHA512
3bc7f2ef40338343128deb5e11dfa73b36f2200e0d4c45f61a9e526ad85a59a3609768f8ea27a3eba3c97026d7cf16339ca665307b13aceb5e50380c1004f784
-
SSDEEP
12288:a3Fj9cVFVoe2GrKCrTSMq1IFjdeEJ/tMhDPF3dWCnTxnaV/ypTBI:aV+JnLfcsdrJVMECTxnaV/yp+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment receipt MT103_tt 9630 copy.exe
Files
-
Payment receipt MT103_tt 9630 copy.rar.rar
-
Payment receipt MT103_tt 9630 copy.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 813KB - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ