Static task
static1
Behavioral task
behavioral1
Sample
Bank Form For Customer Payment Info.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Bank Form For Customer Payment Info.exe
Resource
win10v2004-20230703-en
General
-
Target
Bank Form For Customer Payment Info.exe
-
Size
1.0MB
-
MD5
d115273857d7f9d8a09fbdaed9d599e3
-
SHA1
5ea779e00d3b47793c5bbc3ce4e0f3c9fbc97557
-
SHA256
1889f19be49b1284a5bc88703ffcaf212baf6aedb5702e7a4ab2fde0546fcf90
-
SHA512
2f80b38eaee955a4e5fccdd4bd2eaff0c3905440d74336886ba2135f4a168a73c34566905a49d5369e945770119fdfb007ec144be023814d20a7360ffe7cb3b1
-
SSDEEP
24576:knmmSAe7uhBNWVJSWqmeVX1dm8usN4JX:kveaHNO8AQX/5usN4J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bank Form For Customer Payment Info.exe
Files
-
Bank Form For Customer Payment Info.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 896KB - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ